Audit codebases for bugs, security flaws, and performance issues.
npx skills add https://github.com/cenjie/skills --skill code-audit-cenjie
Please help me install this Agent Skill. Skill: code-audit Source: https://github.com/cenjie/skills/tree/main/skills/code-audit Command: npx skills add https://github.com/cenjie/skills --skill code-audit-cenjie
Conduct a broad, risk-first audit to uncover bugs, security vulnerabilities, performance bottlenecks, architectural weaknesses, and production-readiness gaps across a repository or feature area so teams can prioritize fixes that materially reduce user and business risk.
Run a repository-wide code audit focused on security, correctness, maintainability, and production readiness and return a Repo Mental Map, Executive Summary, Top Risks, and detailed Findings.
High-intent search queries and answers about installing and using this skill.
To perform a codebase security audit, build a Repo Mental Map to identify runtimes, auth, and data flows, then deep inspect for security flaws, performance issues, and architectural weaknesses to produce prioritized findings with severity, confidence, and remediation steps.
A production-readiness check identifies launch gaps by mapping high-risk surfaces and architectural weaknesses across a repository, yielding an Executive Summary, Top Risks list, and sequenced action plans to ensure the codebase is ready for release.
Yes, you can run a focused deep dive on specific feature modules or targeted security surfaces. The audit produces evidence-backed findings mapped to exact files, routes, and flows with impact analysis and minimal remediation steps.
To prioritize codebase risks found during an architecture review, map each issue to exact files with severity, confidence, and impact ratings. This risk-first approach produces a prioritized findings list to help teams focus on fixes that materially reduce business risk.
The best way to prepare for an acquisition due diligence code audit is to run a risk-first repository-wide sweep. This uncovers security vulnerabilities, performance bottlenecks, and architectural weaknesses, delivering an Executive Summary and Top Risks to evaluate business risk.
Automated repo analysis for finding bugs may not be suitable if you need immediate hotfix patches for isolated incidents rather than a comprehensive architectural assessment. It is designed for broad risk-first discovery and sequenced action plans, not single-line corrections.
hproofTrace cross-module entry points, call chains, and data flows.
LuminairPrimeRun pytest with coverage and generate annotated reports of untested lines.
LuisSambranoPerform systematic code review and static analysis across multiple programming languages.
DevHive1Orchestrate dependency, static analysis, and privacy dataflow scanners into prioritized reports.
