git-repo-audit

Analyze Git repositories for hotspots, author attribution, and secret exposure.

12|2|Updated Apr 21, 2026
One-click install
npx skills add https://github.com/haomingz/kimi-skills --skill git-repo-audit
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: git-repo-audit
Source: https://github.com/haomingz/kimi-skills/tree/main/skills/git-repo-audit
Command: npx skills add https://github.com/haomingz/kimi-skills --skill git-repo-audit

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

Git history can hide frequently changing files, attribution gaps, and leaked credentials. This skill surfaces hotspots, clarifies who touched what, and scans historical commits for sensitive data exposures.

Core Features & Use Cases

  • Hotspot file analysis: identify files with the most changes to guide focused reviews and risk assessment.
  • Ownership mapping: attribute changes to contributors and surface last-active dates for better team coordination.
  • Secret leakage scanning: detect potential secret exposures in history to inform rotation and remediation.

Quick Start

Analyze a repository to generate hotspots, ownership insights, and secret-risk findings in one run.

Frequently Asked Questions about git-repo-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan Git history for leaked secrets and credentials?

To scan Git history for secret exposure, you can analyze historical commits to detect potential sensitive data leaks. This process surfaces leaked credentials to inform immediate security remediation and password rotation.

What is the best way to find hotspot files in a Git repository?

Finding hotspot files in a Git repository involves analyzing git history and diff stats to identify code with the most changes. This highlights high-churn areas to guide focused code reviews and targeted risk assessment.

How do I map code ownership and author attribution using Git commits?

Mapping code ownership using Git commits requires analyzing commit metadata to attribute changes to specific contributors. This clarifies who touched what and surfaces last-active dates for better team coordination.

Can I perform a Git repository security audit on codebases of various sizes?

Yes, you can perform a Git repository security audit on codebases of various sizes. The analysis works across different repository scales to uncover hotspots, attribution gaps, and historical secret exposures in one run.