Claude Code Plugin

if there's a problem,
say it's serious.

Permanent critical mindset injected into every Claude Code session. Real bugs. Questionable decisions. Ordered by impact.

Install plugin View source

Same code. Different lens.

Without critique, problems get buried in reassurance.

"This looks good overall! A few minor things to consider — you might want to add some error handling, and the naming could perhaps be a bit clearer, but overall it's a solid implementation."

🔴 SECURITY

userId comes from request body without validation — attacker controls it. Read from session token instead.

🟡 DESIGN

processOrder does DB write + email in same function — partial failure leaves inconsistent state. Wrap in transaction or split.

Four rules, no exceptions

Active on every response. Code, review, plan, architecture, decisions.

Real problems

Bugs, security flaws, unexpected behaviors, unhandled edge cases. Only what actually breaks or causes damage.

Questionable decisions

Architecture choices that will cause pain later — explained with why and a better alternative.

What's good

Mentioned only if non-obvious and worth reinforcing. No praising the obvious.

Priority

Findings ordered by real impact, not ease of fix. Highest consequence-if-ignored first.

Three levels

Scan for blockers. Critique by default. Go rigorous when it matters.

/scan LIGHT · ONE-SHOT

Quick blocker check on whatever you point at. Reports only what actually breaks: bugs that crash, security holes, silent failures. No style, no suggestions. If nothing critical — says so and stops.

scan this tem algo errado aqui check this quick review

/critique MEDIUM · DEFAULT

Active by default in every session via SessionStart hook. Context-aware: code → bugs + security + edge cases; spec/plan → assumptions + YAGNI; architecture → tradeoffs + coupling. Silent on trivial tasks — speaks up when it matters.

critique off disable critique stop critique desativa critica

/rigorous HEAVY · ON-DEMAND

Full forensic analysis. No mercy, no noise filter. For high-stakes decisions, complex code, and anything irreversible. Pre-flight, security audit, implementation audit — structured output before any action.

/rigorous /rigorous plan <task> /rigorous sec /rigorous impl /rigorous code

Get started

Two options. Both take under a minute.

Option 1 — extraKnownMarketplaces

~/.claude/settings.json

{
  "extraKnownMarketplaces": {
    "critique": {
      "source": {
        "source": "github",
        "repo":   "Alfafis/critique"
      }
    }
  }
}

Claude Code

/plugin install critique@critique

Option 2 — community marketplace