AI-powered audit skills for Claude Code, Cursor, and 40+ other agents.
Run comprehensive health audits, security scans, and best-practices checks on Flutter, NestJS, React, Python (FastAPI, Django, Flask), and more — directly from your AI coding assistant.
npx skills add somnio-software/somnio-ai-toolsWorks with Claude Code, Cursor, Windsurf, Copilot, and 40+ other agents.
Claude Desktop App (Cowork plugin)
- Open Claude Desktop App → Cowork tab → Customize → Explore Plugins
- Go to Personal, click +, paste
somnio-software/somnio-ai-tools - Select which plugins to install from the marketplace
Somnio CLI (includes multi-step audit runner)
dart pub global activate -sgit https://github.com/somnio-software/somnio-ai-tools.git --git-path cli
somnio setup| Skill | Alias | Description |
|---|---|---|
| Flutter Health Audit | fh |
13-step project health audit with weighted scoring |
| Harness Audit | ha |
AI-harness completeness score (CLAUDE.md, rules, hooks, agents) |
| Flutter Best Practices | fp |
Code quality validation against live GitHub standards |
| Angular Health Audit | ah |
13-step modern Angular (2+) health audit with weighted scoring |
| NestJS Health Audit | nh |
13-step backend health audit with weighted scoring |
| NestJS Best Practices | np |
DTO, architecture, and error handling validation |
| SOC 2 Readiness Audit | s2 |
Whole-project SOC 2 Trust Services Criteria readiness & gap analysis |
| React Health Audit | rh |
13-step frontend health audit with weighted scoring |
| React Best Practices | rp |
Component, hooks, state management, and TypeScript validation |
| AngularJS Best Practices | ajp |
AngularJS 1.x code-quality validation (DI-safety, digest, testing) |
| AngularJS Health Audit | ajh |
13-step legacy AngularJS 1.x health audit with weighted scoring |
| Python Health Audit | ph |
13-step project health audit with weighted scoring |
| Python Best Practices | pp |
Code style, typing, function design, and testing validation |
| Angular Best Practices | ap |
Angular 2+ code-quality validation (RxJS, change detection, TS) |
| Security Audit | sa |
Framework-agnostic security scan (secrets, deps, SAST) |
| ISO 27001 Readiness Audit | iso |
Whole-project ISO/IEC 27001:2022 ISMS & Annex A readiness & gap analysis |
| Skill | Description |
|---|---|
| Clockify Tracker | Log time manually or auto-fill from daily work logs — two modes, full preview before posting |
| Workflow Builder | Custom multi-step AI workflows with parallel execution |
| Ship | Automated ship workflow: merge, test, bump, changelog, commit, push, open PR |
| Git Branch Format | Branch naming convention generator |
| Git Commit Format | Conventional Commits message generator |
| Dart Model from JSON | Generate Dart model classes from a JSON structure with json_annotation + equatable |
| Optimize Claude Config | Audit & optimize a repo's Claude Code config for lazy-loading rules and a lean CLAUDE.md |
| DORA Metrics | Deployment Frequency and Lead Time for Changes, per project and per repo, from the GitHub API |
Claude Code hooks that run automatically during sessions — opt-in, separate from somnio setup.
| Hook | Trigger | What it does |
|---|---|---|
| Work-Log Stop | After every turn | Appends a 2-3 sentence Haiku summary to ~/.work-log/YYYY-MM-DD.md — powers Clockify log-based mode |
Install via the Somnio CLI:
somnio hooks # interactive: shows what will change, prompts for confirmation
somnio hooks --force # skip confirmationGlobal coding standards — automatically applied by your AI agent in every project.
| Rules Pack | Coverage |
|---|---|
| Flutter Rules | Layered architecture, BLoC patterns, testing, JSON models |
| Firebase Functions Rules | Architecture, module boundaries, Express + auth, secrets, error handling, testing |
| NestJS Rules | DTOs, services, controllers, repositories, testing, error handling, TypeScript |
| React Rules | Components, hooks, state management, performance, testing, TypeScript |
| TypeScript Rules | tsconfig standards, naming, imports, types, nullables, async/await, error handling |
| Python Rules | Code style (PEP 8/Ruff), strict type hints, function design, module structure, Pydantic validation, EAFP error handling, pytest unit + integration testing |
| FastAPI Rules | Domain-package structure, APIRouter modularization, Pydantic request/response schemas, Depends injection, async vs sync handler choice, HTTPException boundary translation — layers on Python Rules |
| Django Rules | Models and ORM optimization (N+1 defense), migrations, service/selector layer, DRF views/serializers, settings by environment, security hardening, pytest-django testing — layers on Python Rules |
| Flask Rules | Application factory, blueprints, configuration hierarchy, init_app extension pattern, Flask-SQLAlchemy sessions, error handler registration, conftest fixture testing — layers on Python Rules |
Install via the Somnio CLI:
somnio rules install # interactive: detect agents + choose scope
somnio rules install --agent claude --global # Claude Code, global
somnio rules install --agent cursor --project # Cursor, current project
somnio rules install --all --global # all detected agents, globalRoot-level commands installed at folder scope — project-specific extensions for Claude Code and Cursor.
somnio commands install # interactive: detect agents + choose which commands
somnio commands install --agent claude --all # Claude Code, all commands
somnio commands install --agent cursor --all # Cursor, all commandsCommands are written to .claude/commands/ (Claude) and .cursor/commands/ (Cursor) — project scope only, not global. Example: ship (merge, test, bump, changelog, commit, push, open PR).
| Command | Description |
|---|---|
/somnio:audit |
Auto-detect project type and run the appropriate audit |
/somnio:quick-check |
Fast 2-3 minute lightweight assessment |
somnio run <alias> |
CLI: execute a multi-step audit from terminal |
Two ways to extend the setup: Cowork marketplace plugins that install through the Claude Desktop App, and standalone CLIs you install yourself and run alongside Somnio.
Somnio ships as a Claude Desktop App plugin (Cowork):
| Package | Focus |
|---|---|
| Development | Health audits, security scans, best practices |
Separate binaries that add commands to Claude Code. These are not marketplace plugins and do not install via npx skills add. You install each one directly.
| Tool | What it does |
|---|---|
| Vector | Spec-driven kanban board for Claude Code specs. A JSON record on disk is the source of truth; a local web board renders it live. |
Install the Vector binary once, then run vector init in each repo you want to track:
curl -fsSL https://raw.githubusercontent.com/mcampbellr/vector/main/scripts/install.sh | sh
cd <your-project>
vector initvector init seeds the /vector:* commands into .claude/commands/vector/, detects your stack, and creates the .vector/ state directory.
Full install options and usage: Vector repository
| Installation Guide | Skills Catalog | CLI Reference |
| Plugin System | Workflow Builder | Architecture |
| Agent Rules | Hooks | Contributing |
We welcome contributions. See the Contributing Guide for setup instructions, how to add new skills, agent rules, agents, or plugins, and the pull request workflow.
MIT — see LICENSE for details.