CoalMine plugin
Nine review skills for coding agents: dead code, hallucinations, dependency security, resilience and contract drift
- 15 ★ on the repository
- Last commit
- Apache-2.0
Extended access
Why this level
- The checks read project files and run builds and tests
- Fixes apply to the working tree, though with a revert if tests fail
Install
- Works in
In your terminal, with SkillFoxx CLI
npx skillfoxx add plugins/coalmineDetects the agents on your machine, shows the access level and pins the version.
Other ways to install
Access and checks
How we reviewExtended accessThe tool runs code or makes network calls and only reads external data.
- The checks read project files and run builds and tests
- Fixes apply to the working tree, though with a revert if tests fail
This is third-party code. Review the repository files before installing.
What it does
The plugin adds nine code quality checks to the agent, each as a separate skill. They include rot-canary for dead code, leaks and stale docs, source-grounding against hallucinations, supply-chain-audit for dependency vulnerabilities and licenses, plus checks for resilience, observability, testability, scaling and contract drift. Some checks run on demand via a command, some run in the background, and in Claude Code rot-canary wires into hooks and runs at session end. Every fix goes through a safe loop that reverts if tests fail.
Who it is for. For developers and QA engineers who want to catch common code problems before they reach the repository.
Good fit when
- You need to scan a project for dead code, leaks and races at session end
- You need to audit dependencies for vulnerabilities and licenses
- You want a background guard against agent hallucinations with source verification
Not a fit when
- You need a full static analyzer or CI pipeline rather than in-agent checks
- You are conserving tokens and cannot afford extra passes on every task
Example request
Run rot-canary on the changed files and show dead code and leaks, do not fix anything yetLimitations
The checks run inside the agent and depend on its model; this is not a deterministic linter. Automatic session-end runs are wired out of the box for Claude Code; for other agents the hooks are added manually with snippets from platform-configs. Apache-2.0 licensed.
How to disable. Uninstall the coalmine plugin via /plugin or remove the skill folders and the rot-canary hooks from the agent settings.
FAQ
Do the checks fix code or only report?
By default they report first; fixes apply through a safe loop: stash, apply, run build and tests, revert on failure.
Does it work outside Claude Code?
The skills follow the SKILL.md standard and work across agents, but automatic session-end hooks are wired out of the box for Claude Code; others use manual snippets.
Discussion
No questions or reviews yet.
Related
PluginsA Claude Code and Codex plugin with skills for code research, tests, refactoring and independent review of finished changes
Claude Code kit with eight phase agents, 21 skills and hooks that keep the agent inside set limits.
A plugin makes the agent explain its code and, before a push, ask questions so you understand what you are merging.
A skills library that gives coding agents a development process: brainstorming, planning, TDD, subagents and code review
A Claude Code plugin links planning, implementation and task checks, retains progress and controls how independently agents work.
A Claude Code plugin that hands a task to a local no_human and reviews a branch with a reviewer that never saw the coder's session
README in short
The README describes nine canary skills, named after the mine canary that dies first. A table lists what each check catches and how it runs: background, one-time, on demand or automatically at session end. It notes compatibility with Claude Code, Cursor, Codex, Gemini CLI, Cline and Copilot through the SKILL.md standard. Installation is a Claude Code plugin or via npx skills; fixes apply through a safe loop with rollback.