nm-conserve-bloat-detectorDetect codebase bloat via progressive analysis: dead code, duplication, complexity, and doc bloat
Install via ClawdBot CLI:
clawdbot install athola/nm-conserve-bloat-detectorGrade Fair — based on market validation, documentation quality, package completeness, maintenance status, and authenticity signals.
Calls external URL not in known-safe list
https://github.com/athola/claude-night-market/tree/master/plugins/conserveAudited Apr 17, 2026 · audit v1.0
Generated May 11, 2026
A SaaS startup preparing for a major product launch uses bloat-detector to identify dead code, stale comments, and unused dependencies. This reduces technical debt and improves deployment reliability, ensuring a smooth release.
An e-commerce company runs the quarterly bloat scan to detect duplicated payment modules and outdated documentation. By prioritizing high-confidence removals, they reduce codebase size by 15% and speed up developer onboarding.
A financial services firm uses deep audit to find God classes and lava flow anti-patterns in its legacy trading system. The analysis helps prioritize refactoring, reducing risk and improving system maintainability.
A tech startup using AI-assisted coding detects hallucinated dependencies and tab-completion bloat via bloat-detector. This ensures the codebase remains clean and reduces integration issues.
An open source maintainer runs quick scans before accepting pull requests, catching stale files and large commits. This keeps the project lean and reduces review time for contributors.
Offer bloat-detector as a monthly subscription service integrated with CI/CD pipelines. Provide tiers based on scan depth (quick, targeted, deep) with additional features like automated remediation.
Provide expert-led codebase bloat audits and training for development teams. Use bloat-detector to generate reports and then offer remediation consulting.
Offer the quick scan for free, but charge for targeted analysis, deep audit, and automated remediation features. This model drives user adoption and upsells.
💬 Integration Tip
Integrate bloat-detector into your CI/CD pipeline by running a quick scan on every pull request to flag bloat early; use the --dry-run flag to preview changes without committing.
Scored May 11, 2026
Security-first skill vetting for AI agents. Use before installing any skill from ClawdHub, GitHub, or other sources. Checks for red flags, permission scope,...
Comprehensive security auditing for Clawdbot deployments. Scans for exposed credentials, open ports, weak configs, and vulnerabilities. Auto-fix mode included.
Analyze and classify agent skills for safety using local evaluation. Optionally produce a signed attestation of the vetting result.
Detect 500+ types of hardcoded secrets (API keys, credentials, tokens) before they leak into git. Wraps GitGuardian's ggshield CLI.
Audit codebases and infrastructure for security issues. Use when scanning dependencies for vulnerabilities, detecting hardcoded secrets, checking OWASP top 10 issues, verifying SSL/TLS, auditing file permissions, or reviewing code for injection and auth flaws.
Detects fail-open insecure defaults (hardcoded secrets, weak auth, permissive security) that allow apps to run insecurely in production. Use when auditing security, reviewing config management, or analyzing environment variable handling.