CLI Tools

Ever looked at your codebase knowing there’s dead code, stale imports, and logic holes — but assigning a senior dev to audit it costs $200/hr and using a cheap LLM to “just look at everything” returns AI-fluffed noise? Yeah, me too. That’s the exact gap shadcn/improve aims to fill. So the idea is deceptively simple: let your most expensive, most capable LLM do the hard thinking — audit, root-cause analysis, architecture calls — then hand its plan to a cheap model to execute. Different costs, different roles, one npx pipeline. And it’s from the same person who brought us shadcn/ui — already sitting at 4,900 stars in under a week. ...

Ever downloaded a Claude Code skill or a Codex CLI extension without checking what it actually does? Yeah, me too. We all do. But here’s the thing — a recent study found 26.1% of agent skills contain security vulnerabilities, and 5.2% are outright malicious. I’ve seen the AI supply chain problem get real before. Still, that’s not a theoretical risk. So that’s roughly one in four skills carrying a security risk. ...