evaluate-repository

Generate a health scorecard for a code repository across six security dimensions.

42|9|Updated Mar 16, 2026

Search Tags:#security #audit #remediation #code-review #dependency #repo #scorecard

Ready to run

npx skills add https://github.com/drvoss/everything-copilot-cli --skill evaluate-repository

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: evaluate-repository
Source: https://github.com/drvoss/everything-copilot-cli/tree/main/skills/security/evaluate-repository
Command: npx skills add https://github.com/drvoss/everything-copilot-cli --skill evaluate-repository

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

It provides a comprehensive health assessment of any codebase, scoring security, code quality, test coverage, and documentation across six key dimensions and delivering a prioritized remediation plan.

Core Features & Use Cases

Scores six critical dimensions: secrets & credentials, dependency security, input validation, authentication & authorization, error handling, and supply‑chain configuration.
Generates a clear, tabular scorecard with overall and per‑dimension scores.
Prioritizes remediation actions with P0, P1, and P2 categories.
Operates in read‑only mode, making it safe for third‑party audits.
Ideal for security gate reviews, onboarding open‑source projects, and periodic repository hygiene checks.

Quick Start

Ask the evaluate‑repository skill to analyze https://github.com/example/project and return the full scorecard.

Frequently Asked Questions about evaluate-repository

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I run a security audit on a GitHub repository?▼

A repository health scorecard evaluates codebases across six critical dimensions: secrets, dependency security, input validation, authentication, error handling, and supply chain configuration. It uses git metadata and language-specific pattern scans to generate a tabular scorecard with prioritized remediation actions.

What is included in a repository health scorecard?▼

A repository health scorecard includes overall and per-dimension scores across secrets, dependency security, input validation, authentication, error handling, and supply chain configuration. It also generates a prioritized remediation plan categorized by P0, P1, and P2 severity levels.

Can I assess dependency security and input validation without modifying the codebase?▼

Yes, you can assess dependency security and input validation in a read-only mode. The evaluation relies on git metadata, language-specific pattern scans, and optional CI/CD or package manager tools to analyze the repository without making any modifications.

How do I generate a prioritized remediation plan for code vulnerabilities?▼

Generating a prioritized remediation plan involves scoring six repository health dimensions and categorizing identified vulnerabilities into P0, P1, and P2 priority levels. This provides an actionable tabular scorecard for addressing security and code quality issues.

Does the repository health scorecard work for onboarding open-source projects?▼

Yes, the repository health scorecard is ideal for onboarding open-source projects. It performs a comprehensive hygiene check using git metadata and language-specific pattern scans to evaluate security and code quality without modifying the repository.