healthcheck

Automate security audits and environment hardening for development projects.

30|5|Updated Jul 25, 2025
One-click install
npx skills add https://github.com/phuetz/code-buddy --skill healthcheck
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: healthcheck
Source: https://github.com/phuetz/code-buddy/tree/main/.codebuddy/skills/bundled/healthcheck
Command: npx skills add https://github.com/phuetz/code-buddy --skill healthcheck

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps development teams quickly identify security gaps, misconfigurations, and deployment risks across projects, ensuring safer software delivery.

Core Features & Use Cases

  • Environment health checks: diagnose health posture and configuration issues using automated diagnostics.
  • Security scans & secrets detection: perform dependency and codebase scans for vulnerabilities and hardcoded credentials.
  • Git & production readiness: verify git hygiene and readiness for production via checklists and policy enforcement.

Quick Start

Run the healthcheck workflow: buddy doctor to start diagnostics; npm audit; npm outdated; npx license-checker --summary; rg -i "(api_key|apikey|secret|password|token)" src/ --type ts --type js; git rev-list --objects --all | git cat-file --batch-check='%(objecttype) %(objectname) %(objectsize) %(rest)' | sort -k3 -n -r | head -20

Frequently Asked Questions about healthcheck

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run a security audit and detect hardcoded secrets in my codebase?

Run automated security scans and secrets detection by executing dependency checks like npm audit and searching code for patterns like api_key, secret, password, and token to identify vulnerabilities and hardcoded credentials across your project.

What is the best way to check production readiness before deploying my application?

Production readiness is verified through environment health checks, git hygiene validation, and policy enforcement checklists that ensure explicit approvals, reversible changes, and documented security checks are completed across local, CI, and production contexts.

How do I diagnose environment configuration issues and harden my deployment workflow?

Diagnose environment posture by running automated diagnostics to identify misconfigurations, then harden your workflow by validating dependencies, scanning for vulnerabilities, and enforcing security policies before deployment.

Can I check git security and identify large objects committed to my repository?

Git security checks verify repository hygiene by listing and sorting committed objects by size to identify large hidden files and validate that your git history does not contain sensitive or oversized data.

Does this environment hardening workflow require any external dependencies to run?

No dependencies are required to run this environment hardening workflow, as it operates using standalone diagnostic commands and codebase scanning tools directly within your existing development and deployment environments.