PluginBench
Skill
Review
Audit score 70

plankton-code-quality

affaan-m/everything-claude-code

Auto-format, lint, and fix code violations on every edit via Claude subprocesses and write-time hooks.

What is plankton-code-quality?

Plankton enforces code quality automatically as Claude Code edits files, running formatters and linters in three phases: silent auto-formatting, violation collection, and Claude-powered subprocess fixes routed by complexity. Use it when you need continuous quality enforcement across multiple languages without manual intervention or agent rule-gaming.

  • Auto-formats files silently using language-specific formatters (ruff, biome, shfmt, taplo, markdownlint)
  • Collects unfixable linting violations and routes them to Claude subprocesses (Haiku/Sonnet/Opus by complexity)
  • Blocks linter config edits via PreToolUse hooks to prevent agents from disabling rules instead of fixing code
  • Enforces modern package managers (uv, bun) and blocks legacy ones (pip, npm, poetry) via Bash hooks
  • Supports Python, TypeScript, Shell, YAML, JSON, TOML, Markdown, and Dockerfile with language-specific linters
  • Reports only violations the subprocess couldn't fix; most issues resolve transparently

How to install plankton-code-quality

npx skills add https://github.com/affaan-m/everything-claude-code --skill plankton-code-quality
Prerequisites
  • Claude Code installed and configured
  • Core dependencies: jaq, ruff, uv
  • Language-specific linters: biome (TypeScript), shellcheck/shfmt (Shell), yamllint (YAML), markdownlint-cli2 (Markdown), hadolint (Dockerfile), taplo (TOML)
  • Optional: bandit (Python security), semgrep (TypeScript security), vulture (dead code)
Claude Code
Cursor
Windsurf
Cline

How to use plankton-code-quality

  1. 1.Copy .claude/hooks/ directory and .claude/settings.json to your project
  2. 2.Copy linter config files (.ruff.toml, biome.json, .shellcheckrc, .yamllint, etc.) to project root
  3. 3.Install language-specific linters via brew or package manager
  4. 4.Run claude to start Claude Code; hooks activate automatically on file edits
  5. 5.Review violations reported by the hook; subprocess fixes are applied transparently before output

Use cases

Good for
  • Prevent agents from modifying .ruff.toml or biome.json to disable linting rules
  • Automatically fix formatting and import issues on every file write without agent awareness
  • Route complex type-system violations to Opus while delegating style fixes to Haiku for cost efficiency
  • Enforce code quality standards across polyglot projects (Python + TypeScript + Shell) in one hook
  • Integrate with CI pipelines using the same local hook commands for consistency
Who it's for
  • Teams using Claude Code who want write-time quality gates, not just commit-time checks
  • Projects with strict linting standards that need defense against LLM rule-gaming
  • Polyglot codebases requiring multi-language formatter and linter coordination
  • Developers who want transparent quality enforcement without cluttering agent output

plankton-code-quality FAQ

What happens if the subprocess can't fix a violation?

The main agent sees a [hook] N violation(s) remain message with exit code 2, allowing it to address the issue manually.

Can I disable Plankton for specific file types?

Yes, edit .claude/hooks/config.json and set languages.{python,typescript,shell,etc.} to false to skip those linters.

Does Plankton conflict with ECC hooks?

ECC's Prettier and Plankton's biome may both format JS/TS files. Disable ECC's Prettier PostToolUse hook when using Plankton for cleaner integration.

How do I skip the subprocess phase and just report violations?

Set HOOK_SKIP_SUBPROCESS=1 environment variable or set subprocess_delegation: false in config.json.

What model tier is used for a given violation?

Haiku handles style/formatting (E/W/F codes, 120s), Sonnet handles complexity (C901/PLR, 300s), Opus handles types (unresolved-attribute, 600s). Set HOOK_DEBUG_MODEL=1 to log decisions.

Full instructions (SKILL.md)

Source of truth, from affaan-m/everything-claude-code.


name: plankton-code-quality description: "Write-time code quality enforcement using Plankton — auto-formatting, linting, and Claude-powered fixes on every file edit via hooks." metadata: origin: community

Plankton Code Quality Skill

Integration reference for Plankton (credit: @alxfazio), a write-time code quality enforcement system for Claude Code. Plankton runs formatters and linters on every file edit via PostToolUse hooks, then spawns Claude subprocesses to fix violations the agent didn't catch.

When to Use

  • You want automatic formatting and linting on every file edit (not just at commit time)
  • You need defense against agents modifying linter configs to pass instead of fixing code
  • You want tiered model routing for fixes (Haiku for simple style, Sonnet for logic, Opus for types)
  • You work with multiple languages (Python, TypeScript, Shell, YAML, JSON, TOML, Markdown, Dockerfile)

How It Works

Three-Phase Architecture

Every time Claude Code edits or writes a file, Plankton's multi_linter.sh PostToolUse hook runs:

Phase 1: Auto-Format (Silent)
├─ Runs formatters (ruff format, biome, shfmt, taplo, markdownlint)
├─ Fixes 40-50% of issues silently
└─ No output to main agent

Phase 2: Collect Violations (JSON)
├─ Runs linters and collects unfixable violations
├─ Returns structured JSON: {line, column, code, message, linter}
└─ Still no output to main agent

Phase 3: Delegate + Verify
├─ Spawns claude -p subprocess with violations JSON
├─ Routes to model tier based on violation complexity:
│   ├─ Haiku: formatting, imports, style (E/W/F codes) — 120s timeout
│   ├─ Sonnet: complexity, refactoring (C901, PLR codes) — 300s timeout
│   └─ Opus: type system, deep reasoning (unresolved-attribute) — 600s timeout
├─ Re-runs Phase 1+2 to verify fixes
└─ Exit 0 if clean, Exit 2 if violations remain (reported to main agent)

What the Main Agent Sees

ScenarioAgent seesHook exit
No violationsNothing0
All fixed by subprocessNothing0
Violations remain after subprocess[hook] N violation(s) remain2
Advisory (duplicates, old tooling)[hook:advisory] ...0

The main agent only sees issues the subprocess couldn't fix. Most quality problems are resolved transparently.

Config Protection (Defense Against Rule-Gaming)

LLMs will modify .ruff.toml or biome.json to disable rules rather than fix code. Plankton blocks this with three layers:

  1. PreToolUse hookprotect_linter_configs.sh blocks edits to all linter configs before they happen
  2. Stop hookstop_config_guardian.sh detects config changes via git diff at session end
  3. Protected files list.ruff.toml, biome.json, .shellcheckrc, .yamllint, .hadolint.yaml, and more

Package Manager Enforcement

A PreToolUse hook on Bash blocks legacy package managers:

  • pip, pip3, poetry, pipenv → Blocked (use uv)
  • npm, yarn, pnpm → Blocked (use bun)
  • Allowed exceptions: npm audit, npm view, npm publish

Setup

Quick Start

Note: Plankton requires manual installation from its repository. Review the code before installing.

# Install core dependencies
brew install jaq ruff uv

# Install Python linters
uv sync --all-extras

# Start Claude Code — hooks activate automatically
claude

No install command, no plugin config. The hooks in .claude/settings.json are picked up automatically when you run Claude Code in the Plankton directory.

Per-Project Integration

To use Plankton hooks in your own project:

  1. Copy .claude/hooks/ directory to your project
  2. Copy .claude/settings.json hook configuration
  3. Copy linter config files (.ruff.toml, biome.json, etc.)
  4. Install the linters for your languages

Language-Specific Dependencies

LanguageRequiredOptional
Pythonruff, uvty (types), vulture (dead code), bandit (security)
TypeScript/JSbiomeoxlint, semgrep, knip (dead exports)
Shellshellcheck, shfmt
YAMLyamllint
Markdownmarkdownlint-cli2
Dockerfilehadolint (>= 2.12.0)
TOMLtaplo
JSONjaq

Pairing with ECC

Complementary, Not Overlapping

ConcernECCPlankton
Code quality enforcementPostToolUse hooks (Prettier, tsc)PostToolUse hooks (20+ linters + subprocess fixes)
Security scanningAgentShield, security-reviewer agentBandit (Python), Semgrep (TypeScript)
Config protectionPreToolUse blocks + Stop hook detection
Package managerDetection + setupEnforcement (blocks legacy PMs)
CI integrationPre-commit hooks for git
Model routingManual (/model opus)Automatic (violation complexity → tier)

Recommended Combination

  1. Install ECC as your plugin (agents, skills, commands, rules)
  2. Add Plankton hooks for write-time quality enforcement
  3. Use AgentShield for security audits
  4. Use ECC's verification-loop as a final gate before PRs

Avoiding Hook Conflicts

If running both ECC and Plankton hooks:

  • ECC's Prettier hook and Plankton's biome formatter may conflict on JS/TS files
  • Resolution: disable ECC's Prettier PostToolUse hook when using Plankton (Plankton's biome is more comprehensive)
  • Both can coexist on different file types (ECC handles what Plankton doesn't cover)

Configuration Reference

Plankton's .claude/hooks/config.json controls all behavior:

{
  "languages": {
    "python": true,
    "shell": true,
    "yaml": true,
    "json": true,
    "toml": true,
    "dockerfile": true,
    "markdown": true,
    "typescript": {
      "enabled": true,
      "js_runtime": "auto",
      "biome_nursery": "warn",
      "semgrep": true
    }
  },
  "phases": {
    "auto_format": true,
    "subprocess_delegation": true
  },
  "subprocess": {
    "tiers": {
      "haiku":  { "timeout": 120, "max_turns": 10 },
      "sonnet": { "timeout": 300, "max_turns": 10 },
      "opus":   { "timeout": 600, "max_turns": 15 }
    },
    "volume_threshold": 5
  }
}

Key settings:

  • Disable languages you don't use to speed up hooks
  • volume_threshold — violations > this count auto-escalate to a higher model tier
  • subprocess_delegation: false — skip Phase 3 entirely (just report violations)

Environment Overrides

VariablePurpose
HOOK_SKIP_SUBPROCESS=1Skip Phase 3, report violations directly
HOOK_SUBPROCESS_TIMEOUT=NOverride tier timeout
HOOK_DEBUG_MODEL=1Log model selection decisions
HOOK_SKIP_PM=1Bypass package manager enforcement

References

  • Plankton (credit: @alxfazio)
  • Plankton REFERENCE.md — Full architecture documentation (credit: @alxfazio)
  • Plankton SETUP.md — Detailed installation guide (credit: @alxfazio)

ECC v1.8 Additions

Copyable Hook Profile

Set strict quality behavior:

export ECC_HOOK_PROFILE=strict
export ECC_QUALITY_GATE_FIX=true
export ECC_QUALITY_GATE_STRICT=true

Language Gate Table

  • TypeScript/JavaScript: Biome preferred, Prettier fallback
  • Python: Ruff format/check
  • Go: gofmt

Config Tamper Guard

During quality enforcement, flag changes to config files in same iteration:

  • biome.json, .eslintrc*, prettier.config*, tsconfig.json, pyproject.toml

If config is changed to suppress violations, require explicit review before merge.

CI Integration Pattern

Use the same commands in CI as local hooks:

  1. run formatter checks
  2. run lint/type checks
  3. fail fast on strict mode
  4. publish remediation summary

Health Metrics

Track:

  • edits flagged by gates
  • average remediation time
  • repeat violations by category
  • merge blocks due to gate failures