10x-health-check

Audits an existing project's dependencies, tests, CI/CD, and configuration into a prioritized health report.

Updated Jul 4, 2026
One-click install
npx skills add https://github.com/Assamir/ai-toolkit --skill 10x-health-check-assamir
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: 10x-health-check
Source: https://github.com/Assamir/ai-toolkit/tree/main/.cursor/skills/10x-health-check
Command: npx skills add https://github.com/Assamir/ai-toolkit --skill 10x-health-check-assamir

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve? Before letting an AI assistant work on an existing codebase, you need to know whether the project is operationally healthy — pinned dependencies, a working test runner, sane configuration. This Skill automates that audit and produces a structured report with prioritized fixes and an agent-readiness verdict. ## Core Features & Use Cases - Dependency and security audit: Detects the language family from project markers (package.json, Cargo.toml, pyproject.toml, go.mod, and more), checks lockfile presence, runs the ecosystem's audit tool (npm audit, pip-audit, cargo audit, govulncheck, etc.), and tiers findings by CVSS severity. - Test runner and CI/CD analysis: Detects the test framework, attempts a dry run, and evaluates CI pipeline coverage across lint, test, build, type-check, and security stages. - Prioritized fix report: Writes context/foundation/health-check.md with a healthy / needs-attention / critical-issues verdict, concrete fix commands, effort estimates, and cross-references to stack-assessment findings when available. - Use Case: You inherit a brownfield Node.js project and ask for a health check. The Skill runs npm audit, verifies the lockfile, detects Jest, notes the missing CI pipeline, and writes a report ranking what to fix before agent-assisted development. ## Quick Start Ask the assistant to run a health check on the project in the current directory and write the report to context/foundation/health-check.md.

Frequently Asked Questions about 10x-health-check

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit an existing project before using an AI coding assistant?

Run the health check on your project directory. It detects the language family from project markers, audits dependencies for vulnerabilities, verifies the test runner works, and writes a report with an agent-readiness verdict and prioritized fixes.

What security audit tools does the health check use?

It dispatches per ecosystem: npm audit for JavaScript, pip-audit for Python, cargo audit for Rust, govulncheck for Go, bundle audit for Ruby, composer audit for PHP, and dotnet list package --vulnerable for .NET. Missing tools are skipped with a warning, never a halt.

Does the health check modify or fix my project automatically?

No. The analysis is strictly read-only. It never runs npm audit fix, upgrades packages, or patches code. Every recommendation includes the concrete fix command, but executing fixes is left to you.

What happens if my project has no test runner or CI pipeline?

A missing test runner is flagged as a significant finding because the AI assistant cannot verify its own changes. Missing CI is treated as an expected gap at this stage and noted as covered in a later infrastructure lesson, not as an urgent problem.

Which languages and project types are supported?

It detects JavaScript/TypeScript, Python, Rust, Go, Ruby, PHP, .NET, and Dart via markers like package.json, pyproject.toml, Cargo.toml, go.mod, Gemfile, composer.json, csproj, and pubspec.yaml. Java and Dart skip the built-in audit step with an external tool recommendation.

Why does the health check require an existing codebase in the current directory?

The audit executes real shell commands against project files, so it cannot assess from conversation context alone. If no project markers are found, it stops and suggests using the bootstrapper skill for new projects instead.