@vibecheck-ai/claude-code-plugin

VibeCheck integration for Claude Code. Real-time anti-hallucination guardrails, on-demand verification commands, and live truthpack context for AI-generated code. Catches phantom imports, ghost API routes, fake env vars, hardcoded secrets, and security issues — at the moment Claude writes them, before they reach disk.

Install

/plugin marketplace add vibecheck-oss/claude-code-plugins
/plugin install vibecheck

What you get

MCP Tools (Claude can call these directly)

| Tool | Purpose | | ---------------------- | ---------------------------------------------------------------------------------------------------------- | | truthpack.lookup | Read any truthpack file by key (routes, env, tiers, copy) with optional substring filter | | truthpack.verify | Batch-verify a list of refs (e.g. env:STRIPE_KEY, route:GET /api/users) and get suggestions for misses | | truthpack.routes | List API routes filtered by HTTP method and/or path glob | | truthpack.product | Read tiers, prices, or user-facing copy — never invent these again | | vibecheck.check_file | Run hallucination detection on a single file, returns structured findings | | vibecheck.scan | Run a fresh scan of the project (cloud scan is Pro-only) |

Slash Commands

| Command | Action | | ------------------------------------ | --------------------------------------------------------------------- | | /vibecheck:scan | Generate or refresh the truthpack | | /vibecheck:check [file] | Check a file (or staged diff) for hallucinations | | /vibecheck:truthpack [key] [query] | Inspect truthpack data inline | | /vibecheck:login | Authenticate to vibecheck.ai for Pro features | | /vibecheck:status | Plugin health: CLI version, truthpack age, login state, hook activity |

Skills (load on-demand based on context)

| Skill | When it triggers | | ------------------------------ | ----------------------------------------------------------------------- | | vibecheck:truthpack-lookup | Before writing code that touches routes, env vars, auth, copy, or tiers | | vibecheck:anti-hallucination | When writing imports, function calls, env refs, or external symbols | | vibecheck:drift-watcher | When adding to existing files in an established codebase | | vibecheck:security-sentinel | When handling auth, secrets, user input, file uploads | | vibecheck:quality-enforcer | When reviewing code or before committing | | vibecheck:onboarding | First plugin activation in a new repo |

Hooks

| Hook | Trigger | Behavior | | -------------------------- | ----------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | SessionStart | startup, clear, compact | Warns if .vibecheck/truthpack/ is missing — suggests /vibecheck:scan | | PostToolUse (Write/Edit) | Every file write | Runs vibecheck check. Critical findings (secrets, etc.) → exit 1 (BLOCK). High findings (phantom imports, ghost routes) → exit 2 with <system-reminder> for self-correction. Medium/low → logged to .vibecheck/.claude-hook.log | | PreToolUse (Bash) | Every bash command | Pattern-matches npm/pnpm/yarn install <pkg>. If <pkg> is not on the npm registry, warns inline (catches AI-invented package names) |

Tiers

Free (no signup)

• All hooks
• All slash commands except cloud scan
• All skills
• All MCP tools (truthpack.*, vibecheck.check_file, local vibecheck.scan)

Pro (/vibecheck:login to unlock)

• Cloud scan via vibecheck.scan with cloud: true (faster, augmented findings)
• Drift signals across team-shared truthpacks
• Telemetry dashboards
• CI integration hooks

Configuration

| Env var | Default | Purpose | | -------------------------- | ------- | --------------------------------------------------------------------------------------------- | | VIBECHECK_HOOK_THRESHOLD | high | Severity threshold for the PostToolUse hook. Set to critical-only if blocks become annoying |

Requirements

• Claude Code ≥ latest stable
• Node ≥ 20 on PATH
• VibeCheck CLI (@vibecheck-ai/cli) — auto-resolved via npx if not installed globally. For faster runs: npm i -g @vibecheck-ai/cli

Links

• VibeCheck — the product
• GitHub — source code
• Issues — bug reports

License

MIT