audit

Audit codebases for quality, security, performance, and compliance issues.

Updated Feb 22, 2026

Search Tags:#performance #documentation #security #audit #compliance #ci-cd #codequality

Ready to run

npx skills add https://github.com/marcelocantos/skills --skill audit-marcelocantos

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: audit
Source: https://github.com/marcelocantos/skills/tree/main/skills/audit
Command: npx skills add https://github.com/marcelocantos/skills --skill audit-marcelocantos

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Developers need a comprehensive assessment of their project's health across code quality, security, testing, performance, legal compliance, CI/CD, documentation, and overall agent‑friendliness, without manually checking each area.

Core Features & Use Cases

End‑to‑end audit: Runs a gathering script, spawns specialized agents, and assembles findings into a structured markdown report with severity ratings.
Progress visibility: Emits phase headings that are streamed to the user for real‑time updates.
Actionable output: Creates docs/audit-YYYY-MM-DD.md with a checklist and logs the audit in docs/audit-log.md, ready for commit or further remediation.

Quick Start

Invoke the audit by running the /audit command in the project root.

Frequently Asked Questions about audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I run a full codebase audit for code quality and security issues?▼

To run a full codebase audit, invoke the audit command in your project root. It analyzes source files, build configs, tests, dependencies, and documentation, then outputs a structured markdown report with severity ratings.

What is included in an automated codebase compliance and performance audit?▼

An automated codebase audit identifies quality, security, performance, and compliance issues. It assesses testing, CI/CD, documentation, and overall agent-friendliness by running a gathering script and spawning specialized parallel agents.

Can I audit any repository without installing external dependencies?▼

Yes, you can audit any repository without external dependencies. The audit tool operates independently with no listed dependencies, analyzing your existing source files and configurations to produce the findings report.

What's the best way to generate an actionable compliance and security report for my project?▼

The best way to generate an actionable compliance report is using an automated audit that creates a dated markdown checklist in your docs folder and logs the findings, ready for commit or further remediation.

How does the audit process handle progress visibility during codebase analysis?▼

The audit process handles progress visibility by emitting phase headings that are streamed to the user for real-time updates. This occurs while specialized agents analyze your codebase for issues.

What format does the codebase audit output use for tracking quality and security findings?▼

The codebase audit output uses structured markdown format, creating a dated file with a checklist and logging results in an audit log file, ensuring findings are ready for repository commit.