Identify security vulnerabilities, code quality issues, and tech debt in full-stack repositories.
npx skills add https://github.com/get-caio/harness --skill code-audit-get-caio
Please help me install this Agent Skill. Skill: code-audit Source: https://github.com/get-caio/harness/tree/main/.claude/skills/code-audit Command: npx skills add https://github.com/get-caio/harness --skill code-audit-get-caio
Security vulnerabilities, code quality issues, and tech debt in full-stack codebases can slip through phases and reviews, leading to late-stage fixes and risky releases.
Run the code-audit skill after major phases or at build completion to generate a comprehensive security and quality report.
High-intent search queries and answers about installing and using this skill.
You can identify security vulnerabilities and tech debt by running a cold assessment audit on the unfamiliar codebase, which surfaces actionable findings across architectures and provides reproducible reporting.
The best way to automate code quality and security checks during a build is to run post-phase validation, applying configurable guardrails via scripts to surface issues early before risky releases.
Yes, you can configure code review guardrails to match your project standards by tailoring checks and project configurations, ensuring the static analysis and risk assessment align with your specific requirements.
Static analysis works for full-stack repositories by performing final QA before external review, ensuring code quality and security alignment through automated detection and reproducible reporting.
You should run a risk assessment audit after major development phases, at build completion, or during cold assessments of new codebases to surface security gaps and tech debt early.
MichielDeanIdentifies repository stack, conventions, and quality gates for future sessions.
Euraika-LabsScan source files for debt markers and generate prioritized tech debt reports.
NITISH-gitbitAutomate pre-commit code review and security scans on git diffs.
voidrotConfigure SAST tools like Semgrep, CodeQL, and SonarQube for CI/CD pipelines.
