code-quality

Audit code for security vulnerabilities, performance issues, and complexity metrics.

4|Updated Jan 15, 2026
One-click install
npx skills add https://github.com/mgd34msu/goodvibes-gemini --skill code-quality-mgd34msu
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: code-quality
Source: https://github.com/mgd34msu/goodvibes-gemini/tree/main/skills/code-quality
Command: npx skills add https://github.com/mgd34msu/goodvibes-gemini --skill code-quality-mgd34msu

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill addresses the critical need for maintaining high code quality by proactively identifying and mitigating security vulnerabilities, performance bottlenecks, complexity issues, and accessibility flaws.

Core Features & Use Cases

  • Security Audits: Detects OWASP Top 10 vulnerabilities, secrets, and injection flaws.
  • Complexity Analysis: Measures cyclomatic and cognitive complexity to guide refactoring.
  • Performance Review: Identifies N+1 queries, memory leaks, and large bundle sizes.
  • Use Case: Before merging a pull request, use this Skill to perform a comprehensive audit, ensuring the code adheres to security standards, is performant, and maintainable.

Quick Start

Run a full security audit on the current codebase, checking for OWASP Top 10 vulnerabilities.

Frequently Asked Questions about code-quality

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit code for OWASP Top 10 vulnerabilities and injection flaws?

A comprehensive security audit detects OWASP Top 10 vulnerabilities, secrets, and injection flaws. This identifies security vulnerabilities to ensure your codebase adheres to established compliance standards before merging.

What is cyclomatic and cognitive complexity measurement in code refactoring?

Cyclomatic and cognitive complexity measurement quantifies how difficult code is to understand and test. Measuring these complexity metrics guides refactoring efforts by highlighting specific areas that need simplification to improve maintainability.

How do I detect N+1 queries and performance bottlenecks in my codebase?

Detect N+1 queries and performance bottlenecks by running a performance review. This identifies N+1 queries, memory leaks, and large bundle sizes to ensure your application remains performant under load.

Can I scan infrastructure as code for security issues alongside application code?

Yes, you can scan infrastructure as code for security issues alongside application code. The audit includes IaC security scanning to identify misconfigurations and vulnerabilities within your infrastructure definitions.

Does this tool validate API contracts and check WCAG compliance for accessibility?

Yes, it validates API contracts and checks WCAG compliance for accessibility. The audit performs accessibility checks against WCAG standards and validates API contracts to ensure frontend and backend integrations match.

What's the best way to check database schema security and type coverage?

The best way to check database schema security and type coverage is through a comprehensive code audit. This performs database schema auditing to find structural vulnerabilities and analyzes type coverage to ensure type safety.