code-auditing

Audit multi-language codebases for quality, security, and maintainability issues.

7|Updated Nov 29, 2025
One-click install
npx skills add https://github.com/jeffrigby/somepulp-agents --skill code-auditing
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: code-auditing
Source: https://github.com/jeffrigby/somepulp-agents/tree/main/plugins/codebase-health/skills/code-auditing
Command: npx skills add https://github.com/jeffrigby/somepulp-agents --skill code-auditing

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires knip, deadcode, and includes references (resource) components.

What problem does it solve?

This Skill eliminates the manual effort of code reviews and technical debt analysis, automatically identifying security vulnerabilities, performance issues, and dead code across your entire codebase.

Core Features & Use Cases

  • Systematic Audits: Comprehensive 6-phase methodology covering security, performance, and maintainability.
  • Use Case: Imagine you're preparing for a major release. Use this Skill to automatically scan all source files, detect critical issues, and generate prioritized action plans.
  • Dead Code Detection: Automated identification of unused functions, imports, and dependencies with false positive filtering.

Quick Start

Audit the current directory for security vulnerabilities and technical debt.

Frequently Asked Questions about code-auditing

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I identify dead code and unused dependencies in my codebase?

Dead code detection automatically scans your codebase to find unused functions, imports, and dependencies, filtering out false positives. Run an audit across your project to generate a prioritized list of candidates for removal, reducing bloat and maintenance burden.

Can I audit a multi-language project for security vulnerabilities and technical debt?

Code auditing applies to multi-language projects, systematically scanning for security vulnerabilities, performance bottlenecks, type-safety gaps, and anti-patterns across all source files. A six-phase methodology covers pre-analysis setup, discovery, file-by-file analysis, best-practices verification, and pattern detection.

What's the best way to prepare for a major release with a code quality audit?

Run a comprehensive audit before release to automatically detect critical issues, anti-patterns, and performance problems across your entire codebase. The Skill generates prioritized findings and actionable remediation steps to resolve issues before deployment.

How does dead code detection avoid false positives when scanning dependencies?

The audit process applies dependency and library health checks with false positive filtering to distinguish genuinely unused code from code required by external references. This ensures your remediation list contains only actionable removals.

Do I need to configure tools separately, or does the audit handle security review and performance analysis automatically?

The audit integrates specified tools to enforce detection of security issues, performance bottlenecks, and anti-patterns in a unified workflow. Configuration is minimal; the six-phase methodology systematically covers security, performance, and maintainability without manual tool setup.