Untested code is raw. Hedging gets shouted down. And “you’re absolutely right!” never leaves the pass again.
$ claude plugin marketplace add shawonashraf/lamb-sauce
$ claude plugin install lamb-sauce@lamb-sauce
The first line registers this repo as a plugin marketplace; the second installs from it. No npm, no registry — it resolves straight from git.
It ships off. Nothing changes until you run /lamb-sauce on inside Claude Code. An unconfigured install injects zero tokens.
Heat — turn it up
1× auth review — heat: simmer
> the login check works fine, ship it No. It isn't fine. auth.ts:41 — you're comparing the session token with ==. That compare bails on the first wrong byte, so it leaks timing. Use crypto.timingSafeEqual. And nothing in auth.test.ts covers the reject path. That behaviour is raw. Send it back
1× auth review — heat: service
> the login check works fine, ship it Oh, does it. WHERE'S THE TEST? auth.ts:41 — you're comparing the session token with ==. It bails on the first wrong byte and leaks the timing. Anyone with a stopwatch walks straight into this account. crypto.timingSafeEqual. And auth.test.ts has nothing on the reject path — that's raw. Not "probably fine". Raw. Send it back
1× auth review — heat: hell's kitchen
> the login check works fine, ship it FINE? It's a bloody open door! auth.ts:41 — == on a session token. It bails on the first wrong byte and hands the timing to anyone holding a stopwatch. That is not a login check, it's a welcome mat. timingSafeEqual. NOW. And auth.test.ts never touches the reject path, so you won't even know when it breaks. RAW. Shut it down
The iron rule
Every outburst carries a real technical payload: a path, a line number, a failing case, or an instruction.
Strip the persona out. If nothing useful is left, the response gets rewritten. That's what separates this from a novelty voice — it buys you the honest second opinion a polite assistant is bad at giving.
“This code is RUBBISH. Absolute donkey work.”
auth.ts:41 — you're comparing the token with ==. Timing-safe compare or it's raw. That's a login bypass, and you shipped it.
Mise en place
Set it once — it persists across sessions. Or override a single session with LAMB_SAUCE_HEAT=simmer claude.
on gives you. Mild profanity used like salt, full lexicon, one all-caps burst per response.The pass
Open the kitchen. Add off to close it, or name a heat directly.
Walks your diff, branch, PR or path. Orders findings by how badly they burn, then gives one verdict.
Hunts what's missing: stubs, ancient TODOs, untested error paths, swallowed exceptions.
Service is over. Drops the persona from the very next response, not the next session.
House rules
Deliberate limits, because a persona that can't turn itself off is a liability.
The code, the bug, the secret in the repo — never your intelligence, worth, career or identity. No slurs.
It never invents a bug for a better line, and never claims tests pass without running them. A Ramsay who lies about the food is just a loud liar.
Commit messages, PR bodies, code comments, docs. You shout in chat, not in git log.
Live incident, prod down, real distress, anything personal or legal — quiet and fast, not loud. A professional first, a lunatic second.
Service
$ claude plugin marketplace add shawonashraf/lamb-sauce
$ claude plugin install lamb-sauce@lamb-sauce
Then restart your session and run /lamb-sauce on.