infra-audit

Scan docker-compose, env files, and ORM configs to map infrastructure and flag missing layers.

Updated Aug 23, 2026
One-click install
npx skills add https://github.com/mferris77/SpringBoard --skill infra-audit-mferris77
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: infra-audit
Source: https://github.com/mferris77/SpringBoard/tree/main/vscode-citadel-harness/skills/infra-audit
Command: npx skills add https://github.com/mferris77/SpringBoard --skill infra-audit-mferris77

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Maps a codebase's actual infrastructure by reading orchestration, environment, and ORM configs so teams understand what systems exist and what layers are missing without relying on documentation or memory.

Core Features & Use Cases

  • Config Discovery: Scans for docker-compose, Dockerfiles, env files, ORM configs, CI/CD workflows, and common client libraries to identify external systems.
  • Connection Tracing: Locates connection strings and client initialization sites to attribute systems to services and build an ASCII connection graph.
  • Pattern Analysis & Gaps: Infers access patterns and flags missing layers (cache, queue, search, object storage) only when supported by code evidence.
  • Output Manifest: Produces a structured infrastructure manifest with system type, product, config path, connection method, usage, and opportunities for remediation.

Quick Start

Run the infra-audit skill to scan this repository for orchestration files, env variables, ORM configs, queues, caches, and produce a structured infra manifest in .planning/infra-manifest.md.

Frequently Asked Questions about infra-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I map project infrastructure and identify missing layers in a codebase?

To map project infrastructure, scan orchestration files, env variables, and ORM configs to discover external systems and connection methods. This identifies missing layers like cache or queues by tracing code evidence, producing a structured manifest for infrastructure planning.

What is an infrastructure manifest and what does it include?

An infrastructure manifest is a structured document detailing system type, product, config path, connection method, and access patterns. It includes an ASCII connection graph and evidence-linked opportunities for remediation, written to .planning/infra-manifest.md without exposing secret values.

How do I trace connection strings and client initialization sites across services?

Trace connection strings and client initialization sites by scanning source files and common client libraries. This attributes external systems to specific services and builds an ASCII connection graph, revealing access patterns and infrastructure dependencies without relying on documentation.

Can I detect missing infrastructure layers like cache and queues from code evidence?

Yes, you can detect missing infrastructure layers by analyzing access patterns and scanning for common client libraries. It flags missing layers such as cache, queue, search, or object storage only when supported by concrete code evidence found during the scan.

Does the infrastructure audit extract secret values from env files?

No, the infrastructure audit scans env files to identify external systems and connection methods but explicitly excludes secret values. It produces a manifest with config paths and access patterns while ensuring sensitive data is never included in the output.

When do I need to scan docker-compose and ORM configs for infrastructure mapping?

Scan docker-compose and ORM configs during project onboarding or when planning infrastructure changes. This discovers orchestration setups, external systems, and client initialization sites, helping teams understand existing infrastructure and identify missing layers without relying on memory.