fleet-scanning-quality

Orchestrate parallel code scans and generate an A-F prioritized markdown report.

125|42|Updated May 19, 2025
One-click install
npx skills add https://github.com/SocketDev/socket-mcp --skill fleet-scanning-quality
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: fleet-scanning-quality
Source: https://github.com/SocketDev/socket-mcp/tree/main/.agents/skills/fleet-scanning-quality
Command: npx skills add https://github.com/SocketDev/socket-mcp --skill fleet-scanning-quality

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

The orchestrated fleet scanning quality skill coordinates multiple finders to surface code-quality issues (bugs, security regressions, and workflow problems) across a repository, producing a single, prioritized report to guide releases.

Core Features & Use Cases

  • Parallel discovery: fans out one finder per scan type to analyze the codebase in parallel.
  • Variant-analysis: cross-checks High/Critical findings for related patterns to surface broader issues.
  • Adversarial verification: optionally attempts to refute high-severity findings to strengthen confidence.
  • Synthesis & reporting: deduplicates results and generates an A-F prioritized markdown report with file references and fixes.

Quick Start

Instruct the fleet-scanning-quality skill to run all enabled scans and generate an A-F quality report for the current diff.

Frequently Asked Questions about fleet-scanning-quality

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run a full code-quality scan before a release?

Code-quality scanning before a release involves orchestrating multiple finders to analyze your repository in parallel, deduplicating the results, and synthesizing them into an A-F prioritized markdown report with actionable fixes.

What is adversarial verification in code scanning?

Adversarial verification in code scanning optionally attempts to refute high-severity findings to strengthen confidence, ensuring critical bugs and security regressions identified during repository analysis are accurate before final reporting.

Can I use automated scanning to check security-sensitive code diffs?

Yes, automated code-quality scanning can be applied when a recent diff touches security-sensitive code. It coordinates parallel finders and variant-analysis across the entire codebase to surface broader related issues.

How does variant-analysis improve repository scanning?

Variant-analysis improves repository scanning by cross-checking High and Critical findings for related patterns, effectively surfacing broader issues across the codebase that might be missed by individual finders working in isolation.

What's the best way to deduplicate code-quality findings from multiple scanners?

The best way to deduplicate code-quality findings is to use an orchestrated scanning workflow that coordinates multiple parallel finders, cross-checks results, and synthesizes a deduplicated A-F prioritized markdown report.

Do I need any dependencies to run orchestrated code-quality scans?

No dependencies are required to run orchestrated code-quality scans. The skill operates independently to coordinate parallel finders, perform variant-analysis, and generate a prioritized A-F markdown report.