One-click install
npx skills add https://github.com/AgentSystemLabs/core --skill audit-agentsystemlabs
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: audit
Source: https://github.com/AgentSystemLabs/core/tree/main/plugins/agentsystem-core/skills/audit
Command: npx skills add https://github.com/AgentSystemLabs/core --skill audit-agentsystemlabs

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

It helps you systematically find and remove accumulated tech-debt across an entire codebase, beyond what diff-only reviews catch, so the result is production-ready and easier to maintain.

Core Features & Use Cases

  • Whole-codebase architecture mapping: Detects entry points, boundaries, and data flow so findings are grounded in how the system actually works.
  • Severity-ranked consolidated audits: Runs a battery of audit checks (types, duplication, security, contracts, concurrency, data integrity, accessibility, performance, observability, and more) across the repo, then deduplicates and groups results into a single actionable report.
  • Gated, safer remediation workflow: Applies only mechanical fixes by default and routes structural/behavior-adjacent changes through explicit approval, with re-verification after.

Use it when you want an end-to-end “deep clean” or a production readiness pass, especially after growth, churn, or unclear ownership that has caused design and quality drift.

Quick Start

Ask your agent: audit the codebase for tech-debt and apply safe mechanical fixes while gating any structural changes.

Frequently Asked Questions about audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform a whole-codebase tech-debt audit without changing behavior?

A whole-codebase tech-debt audit maps architecture and data flow, runs repo-wide checks for types, security, and performance, then applies mechanical fixes while gating structural changes. Deduplicated findings are severity-ranked for safe refactoring without behavior changes.

What is the best way to find accumulated tech-debt beyond diff-only code reviews?

Finding accumulated tech-debt requires mapping entry points and boundaries, then running a fan-out of type hardening, duplication, and security checks across the repo. Diff-only reviews miss systemic drift, so a consolidated audit deduplicates findings into a severity-ranked report.

Can I harden my codebase for production readiness using automated severity-ranked checks?

Yes, production readiness hardening runs a battery of audit checks across code, contracts, concurrency, and observability. Findings are deduplicated and grouped by severity, enabling targeted remediation of data integrity and accessibility issues before deployment.

Do I need baseline gates like typecheck and tests before running a codebase audit?

Yes, baseline gates including typecheck, lint, formatter, and tests are required. Explicit scoping inputs for scope, skip, and mode define boundaries, while interactive confirmation and gated application with re-verification ensure safe mechanical fixes.

How does gated remediation work when applying mechanical fixes during a tech-debt sweep?

Gated remediation applies mechanical fixes by default and routes structural or behavior-adjacent changes through explicit approval. Re-verification runs after application, ensuring refactoring and cleanup maintain baseline integrity across code and architecture.

What security and concurrency checks are run during a deep codebase cleanup?

A deep cleanup runs specialized audit checks covering security hardening, data integrity, concurrency, accessibility, and performance. It maps data flow to ground findings, producing deduplicated results grouped by severity for actionable remediation.