10x-health-check

Audit an existing project's dependencies, tests, CI/CD, and configuration for agent-readiness.

Updated Aug 26, 2026
One-click install
npx skills add https://github.com/michaail/hybrid-logs-analyzer --skill 10x-health-check-michaail
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: 10x-health-check
Source: https://github.com/michaail/hybrid-logs-analyzer/tree/main/.cursor/skills/10x-health-check
Command: npx skills add https://github.com/michaail/hybrid-logs-analyzer --skill 10x-health-check-michaail

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve? Before letting an AI assistant work on an existing codebase, you need to know whether the project is healthy enough to support agent-assisted development. This Skill audits dependency security, lockfile presence, test infrastructure, CI/CD coverage, and missing configuration files, then produces a prioritized report with an agent-readiness verdict. ## Core Features & Use Cases - Dependency and Security Audit: Detects the language family from project markers (package.json, Cargo.toml, pyproject.toml, go.mod, and more), checks lockfile presence, and runs the ecosystem's audit tool (npm audit, pip-audit, cargo audit, govulncheck, and others) with severity tiering. - Test Runner and CI/CD Analysis: Detects test frameworks (Vitest, Jest, pytest, cargo test, RSpec, PHPUnit, xUnit), attempts a dry run, and evaluates CI pipeline coverage across lint, test, build, type-check, and security stages. - Prioritized Fix Report: Writes context/foundation/health-check.md with a healthy / needs-attention / critical-issues verdict, concrete fix commands, effort estimates, and cross-references to stack-assessment findings when available. - Use Case: You inherit a brownfield TypeScript project and want to start AI-assisted development. Run the health check to discover a missing lockfile, two HIGH npm audit findings, and no test runner, then follow the ranked fix list before onboarding the agent. ## Quick Start Ask the assistant to run a health check on the current project to audit dependencies, tests, and CI configuration and write the health-check report.

Frequently Asked Questions about 10x-health-check

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit my project before starting AI-assisted development?

Run the health check in the project root. It detects your language family from project markers, audits dependencies for vulnerabilities, verifies the test runner works, evaluates CI/CD coverage, and writes a prioritized fix report to context/foundation/health-check.md.

What security audit tools does the dependency check use?

It dispatches per ecosystem: npm audit for JavaScript/TypeScript, pip-audit for Python, cargo audit for Rust, govulncheck for Go, bundle audit for Ruby, composer audit for PHP, and dotnet list package --vulnerable for .NET. Missing tools are skipped with a warning, never a halt.

Does the health check modify or fix my project automatically?

No. The analysis is strictly read-only. It never runs npm audit fix, upgrades packages, or edits configuration. Every finding includes a concrete fix command, but executing fixes is left to the user.

Which project types and languages are supported?

Any codebase with a recognizable project marker: package.json, Cargo.toml, pyproject.toml, go.mod, Gemfile, composer.json, .csproj, or pubspec.yaml. This covers JavaScript, TypeScript, Python, Rust, Go, Ruby, PHP, .NET, and Dart projects.

What happens if my project has no test runner or CI pipeline?

A missing test runner is flagged as a significant finding because the AI assistant cannot verify its own changes. Missing CI is treated as a lower-priority item to address later, and neither condition halts the audit.

When should I not run a project health check?

Skip it when scaffolding a brand-new project, since the bootstrapper runs its own verification, or when you only want a stack quality-gate assessment without operational health checks, which is the stack-assess skill's role.