health-scan

Scan codebases for security vulnerabilities, dependency staleness, coverage gaps, and dead code.

1|Updated Mar 15, 2026
One-click install
npx skills add https://github.com/paulingham/.claude --skill health-scan
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: health-scan
Source: https://github.com/paulingham/.claude/tree/main/skills/health-scan
Command: npx skills add https://github.com/paulingham/.claude --skill health-scan

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Proactively identifies and reports health issues in a codebase, reducing risk by surfacing security vulnerabilities, dependency staleness, test-coverage gaps, tech debt indicators, and dead code before they become blockers.

Core Features & Use Cases

  • Surface security vulnerabilities, outdated dependencies, and coverage gaps across Node/TS, Ruby, Python, and Go projects.
  • Generate a ranked health report to guide remediation and prioritization.
  • Auto-create Jira tickets for critical findings to accelerate remediation.
  • Support onboarding of new codebases and ongoing maintenance scans.

Quick Start

Run health-scan on the project root to generate a health report and optionally auto-create Jira tickets for critical findings.

Frequently Asked Questions about health-scan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan my codebase for security vulnerabilities and tech debt?

A codebase health scan identifies security vulnerabilities, outdated dependencies, coverage gaps, and dead code across Node/TS, Ruby, Python, and Go projects. It produces a ranked report to guide remediation and can auto-create Jira tickets for critical findings.

Can I automatically create Jira tickets for security and dependency findings?

Yes, the health scan optionally auto-creates Jira tickets for critical findings like security vulnerabilities and outdated dependencies. This accelerates remediation by directly generating actionable tracking tickets from the ranked health report.

Does codebase health scanning support Python and Go projects?

Yes, codebase health scanning supports Python and Go projects, alongside Node/TS and Ruby. The scan surfaces security vulnerabilities, dependency staleness, and test-coverage gaps across these specific language ecosystems.

What is the best way to check for outdated dependencies and dead code during onboarding?

The best way to check for outdated dependencies and dead code during onboarding is to run an automated health scan on the new project root. It proactively surfaces these risks and generates a ranked report for prioritized remediation.

When should I run an automated health scan on my codebase?

You should run an automated health scan during new codebase onboarding, weekly hygiene checks, post-release housekeeping, and ongoing maintenance. This proactively reduces risk by surfacing blockers like tech debt and coverage gaps before they escalate.