codebase-audit

Solid

全面代码库审计 — 自适应并行深度分析(前后端契约、数据完整性、异常处理/安全、架构/技术债、配置/缓存),输出按严重程度排序的统一报告和修复路线图。Use when user asks to audit, analyze, or review an entire codebase for design issues, find hidden bugs, check architecture health, or asks '全面审查', '代码库审计', '分析设计问题', 'audit codebase', 'health check', '有哪些问题'. Also trigger when user asks to find silent degradation, data flow breakpoints, type mismatches between frontend and backend, or wants to understand technical debt across a project.

AI & Automation 140 stars 15 forks Updated today MIT

Install

View on GitHub

Quality Score: 87/100

Stars 20%
72
Recency 20%
100
Frontmatter 20%
70
Documentation 15%
100
Issue Health 10%
50
License 10%
100
Description 5%
100

Skill Content

# Codebase Audit — Adaptive Deep Analysis A comprehensive codebase audit that adapts its agent configuration to the project's tech stack. Each agent uses opus for maximum thoroughness. Results are compiled into a unified report sorted by severity with a phased repair roadmap. ## Core Principles 1. **Opus only** — All audit agents MUST use `model="opus"`. This is non-negotiable. Smaller models miss subtle cross-file issues. 2. **Depth over breadth** — Fewer agents with broader scope and deeper analysis beats many shallow agents. Each agent should trace issues across file boundaries. 3. **Adaptive** — Agent count and focus areas vary by project type. Don't waste an agent on "frontend rendering" for a backend-only project. ## When to Use - User asks to audit/review/analyze an entire codebase - User wants to find hidden bugs, silent degradation, or design inconsistencies - User asks about technical debt, architecture health, or "what's broken" - Before a major refactor or after inheriting an unfamiliar codebase - Periodic health check (monthly/quarterly) ## Workflow ### Phase 0: Tech Stack Detection Detect the project's tech stack to determine the agent configuration: ``` Detection checklist: - package.json / tsconfig.json → TypeScript/JavaScript (React, Next.js, Vue, etc.) - pyproject.toml / requirements.txt / setup.py → Python (FastAPI, Django, Pydantic, etc.) - Cargo.toml → Rust (serde, axum, actix, etc.) - go.mod → Go (gin, echo, gorm, etc.) - Multiple stacks → Full-...

Details

Author
majiayu000
Repository
majiayu000/claude-arsenal
Created
5 months ago
Last Updated
today
Language
Python
License
MIT

Integrates with

Similar Skills

Semantically similar based on skill content — not just same category

AI & Automation Solid

code-auditor

Performs comprehensive codebase analysis covering architecture, code quality, security, performance, testing, and maintainability. Use when user wants to audit code quality, identify technical debt, find security issues, assess test coverage, or get a codebase health check.

591 Updated 2 months ago
mhattingpete
AI & Automation Listed

audit

Run comprehensive codebase audit for gaps, deprecated code, TODOs, FIXMEs, architectural anti-patterns, type issues, and code smells. Use when user asks to audit code, find issues, check code quality, or identify architectural problems.

335 Updated today
aiskillstore
AI & Automation Listed

codebase-auditor

Scan a repository against curated coding standards and produce a structured audit report, issue set, refactor plan, and sprint-based remediation roadmap. Use when the user invokes /vibe.audit or asks to review the codebase against established rules. Operates in full autopilot mode from repository scan to sprint plan output.

0 Updated today
Gladisintelligible706
AI & Automation Solid

project-health-auditor

Comprehensive codebase health analysis. Use when reviewing code quality, identifying technical debt, checking dependencies, or assessing project structure.

140 Updated today
majiayu000
AI & Automation Listed

code-auditor

Run a structured review of a diff, file, module, or full codebase. Surfaces correctness bugs, security gaps, performance issues, and maintainability smells with file:line citations and severity rankings. Use when the user says "review this code", "audit this", "find bugs in", "what's wrong with this", "code review", or pastes a diff and asks for feedback. Output is a prioritized punch list, not a wall of nits.

0 Updated 2 days ago
ashishkumar14