A fork of Jeremy Morgan's prompt collection for running code quality and security audits with Claude Code.
Not my work — this is a fork of JeremyMorgan/Claude-Code-Reviewing-Prompts, kept here because I use it. Released under CC0.
The collection is about twenty prompts that drive Claude Code through a structured audit of a codebase, split into two halves. The code quality set covers duplication, SOLID adherence, error handling and exception flow, naming and readability, design patterns, and test coverage. The security set covers authentication and authorization flows, input validation, database and session security, secrets management, file handling, logging, and business logic vulnerabilities.
The value is less in any single prompt than in having a checklist that doesn’t rely on remembering what to look for at the end of a long day.
Upstream is now also packaged as a Claude Code plugin.