code-hardcode-audit

Hardcoded values and magic numbers are detected by orchestrating multiple specialized tools—Ruff for Python magic numbers, Semgrep for credentials and configuration strings, and jscpd for duplicate code blocks. This skill runs these tools across your repository and outputs findings in JSON or text format, identifying lines and severity to prioritize fixes.

Yes. This skill applies to both Python-specific and multi-language codebases, using Ruff, Semgrep, jscpd, and gitleaks to detect magic numbers, leaked secrets, URLs, ports, and duplicate code patterns across diverse project types in a single audit run.

Run a comprehensive hardcode audit on your source directories before a major release or refactoring sprint. The skill detects duplicate code blocks, hardcoded values, and magic numbers, then outputs actionable findings with severity levels and suggested fixes to reduce maintenance debt and bugs.

The skill outputs findings in JSON format designed for CI integration. You can configure rule tuning and exclusion patterns to minimize false positives, then feed the JSON results directly into your pipeline's reporting or gating logic.

Yes. Semgrep and gitleaks components identify credentials, API keys, URLs, and port configurations embedded in your codebase. Findings are flagged with severity levels to help you prioritize remediation of the most critical security risks.

Yes. The skill supports rule tuning and exclusion patterns so you can focus audits on critical issues relevant to your project. This minimizes noise and lets you adapt detection to your codebase's conventions and standards.