10x-health-check

Audits existing codebases for dependency security, test infrastructure, CI/CD coverage, and agent-readiness.

Updated May 23, 2026
One-click install
npx skills add https://github.com/BMS-kmusial/bms-stream-monitor --skill 10x-health-check-bms-kmusial
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: 10x-health-check
Source: https://github.com/BMS-kmusial/bms-stream-monitor/tree/main/.claude/skills/10x-health-check
Command: npx skills add https://github.com/BMS-kmusial/bms-stream-monitor --skill 10x-health-check-bms-kmusial

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve? Before letting an AI agent work on an existing project, you need to know whether the project is healthy enough for agent-assisted development. This Skill audits an existing codebase across dependency security, test infrastructure, CI/CD configuration, and missing configuration files, then produces a prioritized report with an agent-readiness verdict. ## Core Features & Use Cases - Dependency and Security Audit: Detects the language family from project markers (package.json, Cargo.toml, pyproject.toml, go.mod, and more), checks lockfile presence, runs the ecosystem's audit tool (npm audit, pip-audit, cargo audit, govulncheck, and others), and tiers findings by CVSS severity. - Test Runner and CI/CD Evaluation: Detects test frameworks (Vitest, Jest, pytest, cargo test, RSpec, PHPUnit, xUnit), attempts dry-run verification, and evaluates CI pipeline coverage across lint, test, build, type-check, and security stages. - Prioritized Fix Report: Writes context/foundation/health-check.md with findings split into fix-now items and upcoming-lesson items, each with concrete commands and effort estimates, plus cross-references to stack-assessment results when available. - Use Case: You inherit a brownfield JavaScript project and want to start agent-assisted development. Run the health check to discover a missing lockfile, two HIGH npm audit findings, and no test runner, then follow the concrete fix commands before onboarding the agent. ## Quick Start Ask the agent to run a health check on the current project directory to audit dependencies, tests, and CI configuration and write a health report.

Frequently Asked Questions about 10x-health-check

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I check if my existing project is ready for AI agent development?

Run the health check in the project root directory. It detects your language family from project markers, audits dependencies for vulnerabilities, verifies test runner and CI configuration, and writes a report with an agent-readiness verdict and prioritized fixes.

What does a project health check audit for dependencies?

It checks lockfile presence for reproducible builds, runs the ecosystem's security audit tool such as npm audit, pip-audit, cargo audit, or govulncheck, and flags outdated packages with major version gaps. Findings are tiered by CVSS severity from CRITICAL to LOW.

Which languages and package managers does the health check support?

It supports JavaScript/TypeScript, Python, Rust, Go, Ruby, PHP, .NET, Dart, and Java. Language detection uses project markers like package.json, pyproject.toml, Cargo.toml, go.mod, Gemfile, composer.json, and pubspec.yaml.

Does the health check modify or fix my project automatically?

No. The audit is strictly read-only and never runs commands like npm audit fix or package upgrades. It reports each finding with a concrete fix command and effort estimate, but you decide what to apply and when.

What happens if my project has no test runner or CI pipeline?

A missing test runner is flagged as a significant finding because the agent cannot verify its own changes. Missing CI is treated as an expected gap at this stage and noted as covered in a later infrastructure lesson, not as an urgent problem.

When should I use a health check instead of stack assessment?

Use stack assessment to evaluate whether your technology stack meets quality gates, and health check to evaluate the project's operational state such as vulnerabilities, tests, and configuration. The two reports complement each other and health check cross-references stack-assessment findings when available.