code-quality-audit

Automate code quality and security audits for Drupal and Next.js projects.

32|7|Updated Dec 6, 2025

Search Tags:#code quality #testing #static analysis #linting #security audit #next.js #drupal

Ready to run

npx skills add https://github.com/camoa/claude-skills --skill code-quality-audit-camoa

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: code-quality-audit
Source: https://github.com/camoa/claude-skills/tree/main/code-quality-tools/skills/code-quality-audit
Command: npx skills add https://github.com/camoa/claude-skills --skill code-quality-audit-camoa

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires pypdf, pdfplumber, pdf2image, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill automates the process of auditing code quality and security across Drupal and Next.js projects, identifying issues like code smells, duplication, security vulnerabilities, and outdated practices.

Core Features & Use Cases

Comprehensive Audits: Runs PHPStan, PHPMD, PHPCPD, ESLint, Semgrep, Trivy, Gitleaks, and more.
Cross-Stack Support: Works seamlessly for both Drupal (PHP) and Next.js (TypeScript) projects.
Use Case: Before merging a new feature, run a full audit to ensure code adheres to quality standards, is free of common vulnerabilities, and meets coverage targets.

Quick Start

Use the code-quality-audit skill to perform a full audit on the current project.

Frequently Asked Questions about code-quality-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I automate code quality and security audits for Next.js and Drupal projects?▼

To automate code quality and security audits for Next.js and Drupal projects, you can run a full audit suite that uses static analysis and security scanning tools like ESLint, PHPStan, Semgrep, and Trivy to identify linting errors, SOLID principle violations, and security vulnerabilities.

What static analysis tools can I use to detect security vulnerabilities like XSS and SQL injection?▼

You can detect security vulnerabilities like XSS and SQL injection using static analysis scanners such as Semgrep and Trivy, which identify exposed secrets and code flaws across both Drupal and Next.js codebases during the audit process.

Can I run PHPStan and ESLint in the same audit process for a full-stack application?▼

Yes, you can run PHPStan and ESLint in the same audit process to evaluate full-stack applications, executing PHP static analysis for Drupal backend code and TypeScript linting for Next.js frontend code simultaneously.

How do I check test coverage gaps and code duplication before merging a new feature?▼

To check test coverage gaps and code duplication before merging a new feature, run an automated audit using tools like Jest for Next.js coverage and PHPCPD for Drupal copy-paste detection to ensure code meets quality standards.

What is the best way to find exposed secrets in my Next.js and Drupal repositories?▼

The best way to find exposed secrets in Next.js and Drupal repositories is to run an automated security audit using Gitleaks, which scans your codebase to detect hardcoded credentials and sensitive information before deployment.

Does this automated security audit support detecting SOLID principle violations in PHP?▼

Yes, the automated security audit supports detecting SOLID principle violations in PHP by running PHPMD, which analyzes Drupal source code to identify code smells and structural issues alongside standard security vulnerability scans.