Catalog
affaan-m/plankton-code-quality

affaan-m

plankton-code-quality

Write-time code quality enforcement using Plankton — auto-formatting, linting, and Claude-powered fixes on every file edit via hooks. Use when setting up write-time formatting, linting, or auto-fix hooks on file edits.

NewUpdated Sep 9, 2026

Plankton Code Quality Skill

Integration reference for Plankton (credit: @alxfazio), a write-time code quality enforcement system for Claude Code. Plankton runs formatters and linters on every file edit via PostToolUse hooks, then spawns Claude subprocesses to fix violations the agent didn't catch.

When to Use

  • You want automatic formatting and linting on every file edit (not just at commit time)
  • You need defense against agents modifying linter configs to pass instead of fixing code
  • You want tiered model routing for fixes (Haiku for simple style, Sonnet for logic, Opus for types)
  • You work with multiple languages (Python, TypeScript, Shell, YAML, JSON, TOML, Markdown, Dockerfile)

How It Works

Three-Phase Architecture

Every time Claude Code edits or writes a file, Plankton's multi_linter.sh PostToolUse hook runs:

Phase 1: Auto-Format (Silent)
├─ Runs formatters (ruff format, biome, shfmt, taplo, markdownlint)
├─ Fixes 40-50% of issues silently
└─ No output to main agent

Phase 2: Collect Violations (JSON)
├─ Runs linters and collects unfixable violations
├─ Returns structured JSON: {line, column, code, message, linter}
└─ Still no output to main agent

Phase 3: Delegate + Verify
├─ Spawns claude -p subprocess with violations JSON
├─ Routes to model tier based on violation complexity:
│   ├─ Haiku: formatting, imports, style (E/W/F codes) — 120s timeout
│   ├─ Sonnet: complexity, refactoring (C901, PLR codes) — 300s timeout
│   └─ Opus: type system, deep reasoning (unresolved-attribute) — 600s timeout
├─ Re-runs Phase 1+2 to verify fixes
└─ Exit 0 if clean, Exit 2 if violations remain (reported to main agent)

What the Main Agent Sees

Scenario Agent sees Hook exit
No violations Nothing 0
All fixed by subprocess Nothing 0
Violations remain after subprocess [hook] N violation(s) remain 2
Advisory (duplicates, old tooling) [hook:advisory] ... 0

The main agent only sees issues the subprocess couldn't fix. Most quality problems are resolved transparently.

Config Protection (Defense Against Rule-Gaming)

LLMs will modify .ruff.toml or biome.json to disable rules rather than fix code. Plankton blocks this with three layers:

  1. PreToolUse hookprotect_linter_configs.sh blocks edits to all linter configs before they happen
  2. Stop hookstop_config_guardian.sh detects config changes via git diff at session end
  3. Protected files list.ruff.toml, biome.json, .shellcheckrc, .yamllint, .hadolint.yaml, and more

Package Manager Enforcement

A PreToolUse hook on Bash blocks legacy package managers:

  • pip, pip3, poetry, pipenv → Blocked (use uv)
  • npm, yarn, pnpm → Blocked (use bun)
  • Allowed exceptions: npm audit, npm view, npm publish

Setup

Quick Start

Note: Plankton requires manual installation from its repository. Review the code before installing.

# Install core dependencies
brew install jaq ruff uv

# Install Python linters
uv sync --all-extras

# Start Claude Code — hooks activate automatically
claude

No install command, no plugin config. The hooks in .claude/settings.json are picked up automatically when you run Claude Code in the Plankton directory.

Per-Project Integration

To use Plankton hooks in your own project:

  1. Copy .claude/hooks/ directory to your project
  2. Copy .claude/settings.json hook configuration
  3. Copy linter config files (.ruff.toml, biome.json, etc.)
  4. Install the linters for your languages

Language-Specific Dependencies

Language Required Optional
Python ruff, uv ty (types), vulture (dead code), bandit (security)
TypeScript/JS biome oxlint, semgrep, knip (dead exports)
Shell shellcheck, shfmt
YAML yamllint
Markdown markdownlint-cli2
Dockerfile hadolint (>= 2.12.0)
TOML taplo
JSON jaq

Pairing with ECC

Complementary, Not Overlapping

Concern ECC Plankton
Code quality enforcement PostToolUse hooks (Prettier, tsc) PostToolUse hooks (20+ linters + subprocess fixes)
Security scanning AgentShield, security-reviewer agent Bandit (Python), Semgrep (TypeScript)
Config protection PreToolUse blocks + Stop hook detection
Package manager Detection + setup Enforcement (blocks legacy PMs)
CI integration Pre-commit hooks for git
Model routing Manual (/model opus) Automatic (violation complexity → tier)
  1. Install ECC as your plugin (agents, skills, commands, rules)
  2. Add Plankton hooks for write-time quality enforcement
  3. Use AgentShield for security audits
  4. Use ECC's verification-loop as a final gate before PRs

Avoiding Hook Conflicts

If running both ECC and Plankton hooks:

  • ECC's Prettier hook and Plankton's biome formatter may conflict on JS/TS files
  • Resolution: disable ECC's Prettier PostToolUse hook when using Plankton (Plankton's biome is more comprehensive)
  • Both can coexist on different file types (ECC handles what Plankton doesn't cover)

Configuration Reference

Plankton's .claude/hooks/config.json controls all behavior:

{
  "languages": {
    "python": true,
    "shell": true,
    "yaml": true,
    "json": true,
    "toml": true,
    "dockerfile": true,
    "markdown": true,
    "typescript": {
      "enabled": true,
      "js_runtime": "auto",
      "biome_nursery": "warn",
      "semgrep": true
    }
  },
  "phases": {
    "auto_format": true,
    "subprocess_delegation": true
  },
  "subprocess": {
    "tiers": {
      "haiku":  { "timeout": 120, "max_turns": 10 },
      "sonnet": { "timeout": 300, "max_turns": 10 },
      "opus":   { "timeout": 600, "max_turns": 15 }
    },
    "volume_threshold": 5
  }
}

Key settings:

  • Disable languages you don't use to speed up hooks
  • volume_threshold — violations > this count auto-escalate to a higher model tier
  • subprocess_delegation: false — skip Phase 3 entirely (just report violations)

Environment Overrides

Variable Purpose
HOOK_SKIP_SUBPROCESS=1 Skip Phase 3, report violations directly
HOOK_SUBPROCESS_TIMEOUT=N Override tier timeout
HOOK_DEBUG_MODEL=1 Log model selection decisions
HOOK_SKIP_PM=1 Bypass package manager enforcement

References

  • Plankton (credit: @alxfazio)
  • Plankton REFERENCE.md — Full architecture documentation (credit: @alxfazio)
  • Plankton SETUP.md — Detailed installation guide (credit: @alxfazio)

ECC v1.8 Additions

Copyable Hook Profile

Set strict quality behavior:

export ECC_HOOK_PROFILE=strict
export ECC_QUALITY_GATE_FIX=true
export ECC_QUALITY_GATE_STRICT=true

Language Gate Table

  • TypeScript/JavaScript: Biome preferred, Prettier fallback
  • Python: Ruff format/check
  • Go: gofmt

Config Tamper Guard

During quality enforcement, flag changes to config files in same iteration:

  • biome.json, .eslintrc*, prettier.config*, tsconfig.json, pyproject.toml

If config is changed to suppress violations, require explicit review before merge.

CI Integration Pattern

Use the same commands in CI as local hooks:

  1. run formatter checks
  2. run lint/type checks
  3. fail fast on strict mode
  4. publish remediation summary

Health Metrics

Track:

  • edits flagged by gates
  • average remediation time
  • repeat violations by category
  • merge blocks due to gate failures
Files1
1 files · 1.0 KB

Select a file to preview

Overall Score

82/100

Grade

B

Good

Grades are signals, not a certification. Always review a skill yourself before use.

Safety

85

Quality

82

Clarity

85

Completeness

75

Summary

Plankton is a write-time code quality enforcement system for Claude Code that runs formatters, linters, and AI-powered fixes on every file edit via PostToolUse hooks. It uses a three-phase architecture: auto-formatting, violation collection, and optional Claude subprocess delegation (with model routing based on violation complexity). The skill provides configuration and integration guidance for setting up these hooks in projects and pairs with ECC (Enhanced Claude Configuration).

Detected Capabilities

file write (linter configs)shell execution (formatters and linters)subprocess spawning (Claude subprocesses)environment variable read (overrides)json config parsinggit diff analysis (config tampering detection)

Trigger Keywords

Phrases that agents use to match this skill to user intent.

write-time lintingcode quality hooksauto-fix violationsformat on saveconfig protectionmodel routingmulti-language lintagent quality gates

Risk Signals

INFO

Subprocess spawning with Claude subprocesses (claude -p invoked during PostToolUse hooks)

Phase 3: Delegate + Verify section
INFO

Package manager blocking via PreToolUse hooks (pip, npm, yarn blocked)

Package Manager Enforcement section
INFO

Linter config protection via PreToolUse hooks (blocks edits to .ruff.toml, biome.json, etc.)

Config Protection section
INFO

Environment variable overrides for hook behavior (HOOK_SKIP_SUBPROCESS, HOOK_SUBPROCESS_TIMEOUT)

Environment Overrides section

Use Cases

  • Set up automatic code formatting and linting on every file edit during development
  • Prevent agents from modifying linter configs to bypass quality checks
  • Implement tiered model routing for code quality fixes (Haiku for style, Sonnet for complexity, Opus for types)
  • Enforce write-time quality gates across multiple programming languages in a single agent session
  • Integrate code quality enforcement into Claude Code workflows with minimal configuration

Quality Notes

  • Skill provides clear three-phase architecture diagram explaining how Plankton works end-to-end
  • Well-structured setup instructions with per-project integration steps and language-specific dependencies table
  • Good documentation of config protection defense layers (PreToolUse, Stop hook, protected files list)
  • Comparison table clearly differentiates Plankton from ECC and explains complementary vs. overlapping concerns
  • Configuration reference includes JSON example with key settings documented
  • Language-specific dependencies table helps users install only what they need
  • Clear explanation of what the main agent sees in different scenarios (violations, fixes, advisories)
  • Hook conflict resolution with ECC is documented with actionable guidance
  • References credited appropriately (@alxfazio for Plankton, external documentation)
  • Environment overrides section enables debugging and customization without editing core config
Model: claude-haiku-4-5-20251001Analyzed: Sep 9, 2026

Reviews

Add this skill to your library to leave a review.

No reviews yet

Be the first to share your experience.

Version History

  1. v2.0

    Contract changed: description

    ✦ AIExpands activation guidance in description to clarify when agents should use this skill.

    triggering2026-09-09

    LATEST
  2. v1.2

    Content updated

    ✦ AINo substantive changes detected between versions.

    2026-07-14

    View This Version
  3. v1.1

    Content updated

    ✦ AIAdds installation caution and removes git clone command from Quick Start.

    2026-04-20

    View This Version
  4. v1.0

    Seeded from github.com/affaan-m/everything-claude-code

    2026-03-16

    View This VersionInitial version

Use affaan-m/plankton-code-quality in your dev environment

Command Palette

Search for a command to run...