full-audit

Run a 12-phase audit pipeline detecting drift and misconfiguration across VPS, git, and deployed projects.

1|Updated Sep 6, 2024
One-click install
npx skills add https://github.com/carlos18bp/gym_project --skill full-audit-carlos18bp
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: full-audit
Source: https://github.com/carlos18bp/gym_project/tree/main/.agents/skills/full-audit
Command: npx skills add https://github.com/carlos18bp/gym_project --skill full-audit-carlos18bp

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

It detects configuration drift, dependency failures, environment mismatches, and operational risk across the VPS, the repository, and the deployed project instances so you can quickly determine whether the system is healthy.

Core Features & Use Cases

  • Orchestrated 12-phase verification: Runs a canonical full audit workflow that checks toolkit integrity, repo↔server state drift, project configuration consistency, memory/timers inventory sync, service health endpoints, and dependency chain from nginx to Django to MySQL/Redis.
  • Controlled reporting with an executive verdict: Produces a single Markdown report with a global veredicto (🟢/🟡/🔴) plus standardized summaries and prioritized remediation guidance when issues exist.
  • Optional safety/real tests on demand: Supports backup restore testing and real email heartbeat/liveness checks only when explicitly enabled, keeping audits read-only by default.

Quick Start

Run the full audit with read-only verification by executing: bash scripts/audits/full-audit.sh.

Frequently Asked Questions about full-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I detect configuration drift on my VPS after a deployment?

To detect configuration drift on your VPS, you can run an end-to-end audit pipeline that verifies repo-to-server state, project configuration consistency, and service health. This generates a Markdown report under docs/audits with a stable exit code mapping.

What is the best way to validate systemd timers and memory limits match declared configuration?

The best way to validate systemd timers and memory limits is by running an orchestrated 12-phase verification workflow. It inventories memory and timer syncs, checks the dependency chain from nginx to Django, and confirms scheduled tasks match their declared configuration.

How do I generate a post-deploy validation report for Django REST API and MySQL?

You generate a post-deploy validation report by executing a full audit script that checks service health endpoints and dependency chains from nginx to Django to MySQL/Redis. It produces a single Markdown report with an executive verdict and prioritized remediation guidance.

Does the VPS audit script perform destructive actions like backup restores or send real emails?

The VPS audit script stays read-only by default and does not perform destructive actions. Backup restore testing and real email heartbeat or liveness checks remain gated behind explicit flags, requiring you to enable them on demand.

Can I use this audit workflow for troubleshooting environment mismatches after server changes?

Yes, you can use this audit workflow for troubleshooting environment mismatches after server changes. It applies directly to this scenario by detecting dependency failures, configuration drift, and operational risks across the VPS, git repository, and deployed project instances.

What does the global audit verdict exit code mean?

The global audit verdict uses a stable exit code mapping where 0 indicates a healthy system (🟢), 1 indicates warnings (🟡), and 2 indicates critical issues (🔴). This maps directly to the executive verdict in the generated Markdown report.