code-scorecard

Audit codebases across nine dimensions and produce per-ecosystem scores with JSON evidence.

11|7|Updated Apr 2, 2026
One-click install
npx skills add https://github.com/sean-m-cooper/ai_tools --skill code-scorecard
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: code-scorecard
Source: https://github.com/sean-m-cooper/ai_tools/tree/main/skills/code-scorecard
Command: npx skills add https://github.com/sean-m-cooper/ai_tools --skill code-scorecard

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Audits a codebase across nine quality dimensions and produces a clear, actionable scorecard with deterministic evidence when available, reducing guesswork in code reviews, security assessments, and due-diligence.

Core Features & Use Cases

  • Nine-dimension scoring: Provides scores across architecture, code quality, testing, security, error handling, documentation, dependency management, performance, and maintainability.
  • Deterministic evidence-first approach: Uses CodeMetrics.AI outputs as authoritative evidence for deterministic dimensions and falls back to qualitative assessment guided by defined anchors when evidence is missing.
  • Use Case: pre-release health checks, security audits, vendor due-diligence, and ongoing health monitoring of long-lived codebases.

Quick Start

Run the scorecard against your repository entry point (such as a solution file or root package.json) to generate per-dimension scores and a JSON evidence file.

Frequently Asked Questions about code-scorecard

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I generate a code quality scorecard for a polyglot repository?

To generate a code quality scorecard for a polyglot repository, audit the codebase across nine dimensions and present per-ecosystem results with a unified suite summary. Score detected ecosystems like dotnet and javascript-typescript separately using deterministic JSON evidence.

What dimensions are evaluated during an automated codebase audit?

An automated codebase audit evaluates nine dimensions: architecture, code quality, testing, security, error handling, documentation, dependency management, performance, and maintainability. Each dimension receives a 0–10 score backed by deterministic JSON evidence or qualitative assessment.

How does deterministic code scoring work when evidence is missing?

Deterministic code scoring uses CodeMetrics.AI outputs as authoritative evidence when available. If deterministic evidence is missing or incompatible, it falls back to qualitative scoring against published anchors and uses ecosystem-specific thresholds to derive final scores.

Can I use code scorecard metrics for vendor due-diligence and security audits?

Yes, you can use code scorecard metrics for vendor due-diligence and security audits. The scorecard reduces guesswork by auditing a codebase across nine quality dimensions and producing clear, actionable scores backed by deterministic evidence.

What is the best way to run a pre-release health check on a long-lived codebase?

The best way to run a pre-release health check on a long-lived codebase is to run an audit across nine quality dimensions, generating a 0–10 score per dimension. This produces an actionable scorecard with deterministic JSON evidence for ongoing health monitoring.