roam-code

Name: roam-code Review
Item: roam-code
Rating: 3.2
Author: Aaron Matthews

Skill Security Usable

Works inClaude Code

Usable Scanned — metadata only

Enforces architectural constraints and security governance in multi-agent coding workflows before code reaches production.

Architectural intelligence layer for AI coding agents. Structural graph, architecture governance, multi-agent orchestration, vulnerability mapping. 139 commands, 101 MCP tools, 26 languages, 100% local.

Validate microservice boundaries during agent-generated code reviews
Flag dependency violations before merging to main branch
Map and enforce least-privilege patterns across service graphs

504 starsApache-2.0 (commercial OK)FreeQuick setup

Usable rating — This tool is functional but has notable gaps. Review the evaluation notes below before deploying.

Why it matters

Enforces architectural constraints and security governance in multi-agent coding workflows before code reaches production. Detects structural violations and vulnerability patterns across large codebases in real-time.

Best for

Teams running AI-assisted development at scale who need automated guardrails against architectural drift and security regressions across 26+ languages.

Works in

Claude Code Claude Cowork Claude Chat

Source

https://github.com/Cranot/roam-code

By Cranot

How to Get It

Option 1: Claude Desktop App (Code Mode)Click the + button next to the prompt box → Plugins → Add plugin. Search and click Install. Skills work in Claude Code only.

Option 2: Paste into Claude CodeCopy the command below and paste it into your conversation. Claude will install it.

Command

claude plugins install Cranot/roam-code

Tip: Paste this into a Claude Code conversation. Verify command matches your Claude Code version.

Auto-generated from the tool's public listing — not hands-on verified. Cross-check against the source repo's README before running.

First thing to try

After installing, paste this into Claude:

Help me validate microservice boundaries during agent-generated code reviews

CostFree

Trust Signals Auto-scanned

Stars504Contributors6Last updated2026-08-05LicenseApache-2.0 (OK for commercial use)Known CVEsNone foundSources: GitHub Advisory Database + OSV.dev · Scanned 2026-08-12 · scanner vattempted-no-data

Community Pulse Active

Discussed on Hacker News, Reddit

[WP] As a free roaming ghost, you finally feel like you can breach and explore A — Reddit · 4795 pts
Measuring Code Complexity by Its Shape and Distribution — Hacker News · 22 pts
I built a CLI that replaces Claude Code's explore phase with deterministic retri — Reddit · 5 pts

3 mentions across 2 sources

Reviewer notes

Auto-scanned review. These are observations, not a security certification.

Scored from trust signals (evidence-eval-v1): 463 GitHub stars; contributors unknown; last commit 0d ago; license Apache-2.0.

Things to check

Scanned, not hands-on tested — this entry was auto-scanned from public metadata (GitHub metrics, license, security flags). No reviewer has run it, and no tool-specific limitations have been documented yet.

How to evaluate tools before deploying →

Data shown here comes from public APIs and automated scanning. Reviewer notes reflect one person's experience. This is not a security certification or legal recommendation. Always evaluate tools according to your own organization's policies.

Evaluation Scores

Evaluation

Ease of Use

3/5

Versatility

4/5

Reliability

3/5

Security

3/5

Overall score3.25 / 5.00 UsableEvaluatedMay 2026

Scored from trust signals (evidence-eval-v1): 463 GitHub stars; contributors unknown; last commit 0d ago; license Apache-2.0.

← Back to the Claude Observatory