phy-concurrency-auditStatic concurrency and race-condition auditor for Go, Java, Python, Node.js/TypeScript. Detects shared-state mutations without locks (Go map races, Java non-...
Install via ClawdBot CLI:
clawdbot install phy041/phy-concurrency-auditGrade Fair — based on market validation, documentation quality, package completeness, maintenance status, and authenticity signals.
Calls external URL not in known-safe list
https://canlah.aiAudited Sep 7, 2026 · audit v1.0
Generated Sep 7, 2026
A development team integrates the Phy Concurrency Audit into their CI/CD pipeline to automatically scan code on every pull request. The tool runs as a pre-merge check, catching race conditions and TOCTOU vulnerabilities before they reach production.
A financial services company uses the skill to audit its high-frequency trading platform for race conditions in concurrent order processing. The scanner identifies critical shared-state mutations that could lead to silent data corruption and monetary losses.
A healthcare IT vendor scans its patient data management app to ensure thread safety. The audit helps meet regulatory compliance by detecting potential race conditions that could compromise data integrity.
An e-commerce company applies the skill to its Node.js backend, uncovering TOCTOU vulnerabilities in payment processing flows. This prevents exploitable race conditions that could allow unauthorized actions.
Maintainers of a popular open-source library use the skill to review contributions for concurrency bugs. This ensures that new code does not introduce race conditions that could affect all downstream users.
Offer a web-based interface where developers can upload their codebase for scanning. The free tier scans up to a certain number of lines, while advanced features (deeper analysis, historical scans, team collaboration) require a subscription.
Distribute the command-line tool for local use, with a per-developer or per-seat license for commercial use. Provide an enterprise license that includes support, custom rule integration, and compliance reporting.
Do not sell the tool, but use it internally to offer concurrency audit services to other companies. Clients pay for a one-time audit report or an ongoing security partnership.
💬 Integration Tip
Integrate the tool as a pre-commit hook or CI step to get maximum benefit with minimal disruption to developer workflows.
Scored Sep 7, 2026
Control desktop applications on Windows — launch, close, focus, resize, move windows, simulate keyboard/mouse input, manage processes, control VSCode, read clipboard, and capture screen info. Use when the user wants to interact with any running program, switch windows, type text, press shortcuts, open files in VSCode, manage running processes, or get system display information.
Conduct rigorous, adversarial code reviews with zero tolerance for mediocrity. Use when users ask to "critically review" my code or a PR, "critique my code", "find issues in my code", or "what's wrong with this code". Identifies security holes, lazy patterns, edge case failures, and bad practices across Python, R, JavaScript/TypeScript, SQL, and front-end code. Scrutinizes error handling, type safety, performance, accessibility, and code quality. Provides structured feedback with severity tiers (Blocking, Required, Suggestions) and specific, actionable recommendations.
Pragmatic coding standards for writing clean, maintainable code — naming, functions, structure, anti-patterns, and pre-edit safety checks. Use when writing new code, refactoring existing code, reviewing code quality, or establishing coding standards.
Claude Code integration for OpenClaw. This skill provides interfaces to: - Query Claude Code documentation from https://code.claude.com/docs - Manage subagents and coding tasks - Execute AI-assisted coding workflows - Access best practices and common workflows Use this skill when users want to: - Get help with coding tasks - Query Claude Code documentation - Manage AI-assisted development workflows - Execute complex programming tasks
Plan, draft, version, and refine written content with enforced versioning and quality audits.
Use when writing tests, creating test strategies, or building automation frameworks. Invoke for unit tests, integration tests, E2E, coverage analysis, performance testing, security testing.