casedive-audit

Audit CaseDive codebase for API security, test coverage, and performance issues.

Updated Mar 9, 2026
One-click install
npx skills add https://github.com/alasdairnc/casedive --skill casedive-audit
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: casedive-audit
Source: https://github.com/alasdairnc/casedive/tree/main/.claude/skills/casedive-audit
Command: npx skills add https://github.com/alasdairnc/casedive --skill casedive-audit

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps CaseDive teams maintain high code quality and security posture by automatically auditing the codebase and recording results in a persistent append-only log to surface trends over time.

Core Features & Use Cases

  • Automated codebase audit: scans API security, test coverage, data quality, config hygiene, and performance metrics across the project.
  • Diff against history: compares current findings to prior runs to surface what is new, still open, or fixed.
  • Team readiness for deployment: provides a pre-flight health snapshot before releases and audits joined by the CLAUDE audit process.
  • Use Case: run the audit before a major deploy to quickly identify regressions and risk areas.

Quick Start

Run the audit to append findings to AUDIT_LOG.md without modifying source code.

Frequently Asked Questions about casedive-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit codebase security and test coverage before a major release?

You can audit codebase security and test coverage by running an automated scan that surfaces API risks, config hygiene, and performance issues. The audit appends findings to an AUDIT_LOG.md file without modifying source code, providing a pre-flight health snapshot for deployment readiness.

What is an append-only audit log and how does it track code health trends?

An append-only audit log is a persistent record where each codebase audit run adds findings without overwriting history. This mechanism tracks code health trends by comparing current findings against prior entries to surface what is new, still open, or fixed.

Can I compare current code audit findings against previous runs to find regressions?

Yes, you can compare current audit findings against previous runs. The audit process diffs current results against historical entries in the log, surfacing new regressions, still-open risks, and fixed issues across API security, data quality, and performance metrics.

Does the codebase audit process modify my source code during security and performance scans?

No, the codebase audit process does not modify your source code. It scans for API security, test coverage, legal data quality, config hygiene, and performance issues in read-only mode, ensuring all findings are recorded only in the audit log file.

What is the best way to maintain code quality and security posture during periodic health checks?

The best way to maintain code quality during periodic health checks is to run an automated audit that scans security, coverage, and config hygiene. Using phase-based exploration guidelines, it appends results to a persistent log to surface risk trends over time.

Why should I run a code health audit before deployment?

You should run a code health audit before deployment to quickly identify regressions and risk areas across API security and performance. It provides a team readiness snapshot by appending findings to an audit log without altering code.