Omarchy Ryancore

This Codex and Claude plugin audits Omarchy plugins against a set of marketplace review patterns. The scanner reports leads. The skill asks the agent to check each lead at an exact commit, trace untrusted input to its effect, and test proposed fixes. It can also add a validate.sh suite to a plugin and compare known bad and fixed commits.

The rules were derived from public Omarchy marketplace reviews. Reviewer names remain attached to evidence, but this project is independent of the reviewers and the marketplace. A clean scan does not guarantee marketplace approval.

Use

Install the plugin with your Codex or Claude plugin manager, then invoke omarchy-ryancore on a plugin repository. For a direct scan:

python3 skills/omarchy-ryancore/scripts/omarchy_ryancore.py audit /path/to/plugin --format markdown

To add checks to a plugin's validate.sh:

python3 skills/omarchy-ryancore/scripts/omarchy_ryancore.py install /path/to/plugin

The install command writes into the target plugin. Review the generated adversarial test template and replace it with cases for that plugin's actual inputs before relying on the suite.

To run the historical regression matrix:

python3 skills/omarchy-ryancore/scripts/omarchy_ryancore.py evaluate

This command may fetch public repositories. Use --fixture-root to supply local checkouts instead. update queries the marketplace through gh; it requires GitHub CLI authentication. It writes candidate data to .omarchy-ryancore/update-candidates.json by default. That file can include comment text and should stay local.

Research and provenance

The initial sample was collected on 2026-08-24. The research summary gives the selection and category counts. The review index has 50 issues, 51 review-comment references, reviewer event IDs, derived categories, and follow-up references. It does not include complete third-party issue bodies or comments.

The calibrated cases explain seven concrete failures and the narrow bad/fixed assertions used by the scanner. The enrichment method describes how new review events are selected, checked, tested, and promoted. The scanner and validation scripts were developed by pjgeutjens for this project.

Removal

Remove the plugin through the manager that installed it. The audit plugin does not run a service or store credentials. If you used update, delete .omarchy-ryancore/ to remove locally generated candidate data. Checks installed into another plugin remain in that plugin until you remove them there.

Development

python3 /path/to/plugin-creator/scripts/validate_plugin.py .
python3 /path/to/skill-creator/scripts/quick_validate.py skills/omarchy-ryancore
python3 -m compileall -q skills/omarchy-ryancore/scripts

The plugin has Codex, Claude, and Agent Plugins manifests. Run the matching manager's validation before publishing a release.