skills.rest
lucasmccomb
lucasmccombCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

Codebase Audit

Audit codebases for security, dependency, quality, architecture, performance, testing, and documentation issues.

1|Updated Mar 19, 2026
Search Tags:#automation#security#worktrees#github#auto-fix#claude-code#codebase-audit
One-click install
npx skills add https://github.com/lucasmccomb/ccgm --skill codebase-audit-lucasmccomb
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: Codebase Audit
Source: https://github.com/lucasmccomb/ccgm/tree/main/modules/commands-extra/skills/audit
Command: npx skills add https://github.com/lucasmccomb/ccgm --skill codebase-audit-lucasmccomb

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill automates deep, repeatable codebase audits to discover security, dependency, code quality, architecture, performance, testing, and documentation issues while providing safe options for verification and optional auto-fixes.

Core Features & Use Cases

  • Multi-mode audits: Supports parallel worktrees, single-session subagents, multi-clone, and manual orchestration for flexible isolation and scale.
  • Findings compilation & issue creation: Aggregates agent results, de-duplicates findings, generates a human-readable audit report, and can create categorized GitHub issues linked to an epic.
  • Safe auto-fix workflow: Optional --fix flow confines edits to git worktrees, runs verification (lint/type-check/build), commits per-agent branches, merges into a combined branch, and opens a PR upon success.
  • Use Case: Run a thorough security and quality audit across a monorepo, then optionally apply high-confidence fixes and open a PR for review.

Quick Start

Run an interactive audit by invoking /audit to analyze the repository, review findings, and optionally create GitHub issues or an auto-fix PR.

Frequently Asked Questions about Codebase Audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate a security and code quality audit for a monorepo?▼

To automate a monorepo codebase audit, you can run a parallel worktree-based analysis to discover security, dependency, performance, and documentation issues. This Skill aggregates findings, de-duplicates results, and generates a human-readable report.

Can I automatically create GitHub issues from codebase audit findings?▼

Yes, you can create GitHub issues directly from codebase audit findings. The process aggregates agent results, de-duplicates discovered issues, and creates categorized GitHub issues linked to a central epic for tracking.

How do I safely apply automated code fixes and open a pull request?▼

To safely apply automated code fixes, use the optional --fix workflow which confines edits to git worktrees, runs verification commands like lint and build, commits per-agent branches, and opens a PR upon successful verification.

Does the codebase audit tool work with single repositories or only monorepos?▼

The codebase audit tool works with both single-repo projects and monorepos. It supports parallel worktree-based isolation for large monorepos as well as single-session subagent audits for standard repositories.

What verification steps run before an auto-fix pull request is created?▼

Before an auto-fix pull request is created, the workflow runs verification commands including lint, type-check, and build processes within isolated git worktrees to ensure the automated fixes do not break existing functionality.

Related Skills

Explore More Software Engineering Skills→
BrightBlockBrightBlock
2

local_review

Create a git worktree and initialize dependencies for branch review.

Official
Intermediate
rickyanandarickyananda
1

github-pr-workflow

Manage GitHub pull request lifecycles from branch creation through merge and cleanup.

Community
Advanced
YangYuS8YangYuS8

subagent-driven-development

Orchestrate independent subagents to execute plan tasks with two-stage reviews.

Community
Advanced
OneWave-AIOneWave-AI
245

code-review-pro

Review code for security vulnerabilities, performance bottlenecks, and maintainability issues.

Official
Basic