What problem does it solve? Before letting an AI assistant work on an existing codebase, you need to know whether the project is operationally healthy: are dependencies vulnerable, is there a test runner to verify changes, is CI configured, and are key config files missing. This Skill runs that audit automatically and produces a prioritized report. ## Core Features & Use Cases - Dependency and security audit: Detects the language family from project markers (package.json, Cargo.toml, pyproject.toml, go.mod, and more), checks lockfile presence, runs the ecosystem's audit tool (npm audit, pip-audit, cargo audit, govulncheck, and others), and tiers findings by CVSS severity. - Test runner and CI/CD detection: Identifies the test framework, attempts a dry run, and evaluates CI pipeline coverage across lint, test, build, type-check, and security stages. - Prioritized health report: Writes context/foundation/health-check.md with a healthy / needs-attention / critical-issues verdict, concrete fix commands, effort estimates, and cross-references to stack-assessment findings when available. - Use Case: You inherit a brownfield Node.js project and ask for a health check. The Skill runs npm audit, detects that Vitest is configured but the lockfile is missing, notes there is no CI pipeline, and writes a report ranking the fixes by impact on AI-assisted development. ## Quick Start Ask the assistant to run a health check on the project in the current directory and write the report to context/foundation/health-check.md.
