ln-628-concurrency-auditor

Audit codebases for async races, thread safety violations, and deadlocks.

Updated Mar 14, 2026
One-click install
npx skills add https://github.com/0xtaoist/taogate --skill ln-628-concurrency-auditor-0xtaoist
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: ln-628-concurrency-auditor
Source: https://github.com/0xtaoist/taogate/tree/main/ln-628-concurrency-auditor
Command: npx skills add https://github.com/0xtaoist/taogate --skill ln-628-concurrency-auditor-0xtaoist

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Audits codebases for concurrency issues across async boundaries, threading, and cross-process resource access to prevent race conditions, TOCTOU, and deadlocks.

Core Features & Use Cases

  • Two-layer detection: Grep-style candidate discovery followed by contextual reasoning to confirm findings.
  • 7 checks: async races, thread safety, TOCTOU, deadlocks, blocking I/O, resource contention, cross-process races.
  • Automates scoring and report generation to integrate with the ln-620 coordination pipeline and produce deterministic 628-concurrency.md reports.

Quick Start

Run the concurrency auditor against a target codebase to generate the 628-concurrency.md report in the configured output directory.

Frequently Asked Questions about ln-628-concurrency-auditor

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit my codebase for race conditions and deadlocks?

To audit for race conditions and deadlocks, this tool performs two-layer detection by scanning for pattern-based candidates and applying context-aware reasoning to confirm thread safety and concurrency issues across your codebase.

What is a TOCTOU vulnerability and how is it detected in asynchronous code?

A TOCTOU vulnerability is a time-of-check to time-of-use race condition. This tool detects TOCTOU in asynchronous code through contextual reasoning applied after initial pattern-based candidate discovery across supported languages.

Can I check for thread safety violations in JavaScript, Python, Go, and Java?

Yes, you can check for thread safety violations across JavaScript, Python, Go, and Java. The auditor scopes multi-threaded and asynchronous environments in these languages to identify cross-process races and blocking I/O.

What's the best way to generate a deterministic concurrency report?

The best way to generate a deterministic concurrency report is to run this auditor, which automates scoring and writes a fixed 628-concurrency.md report to your specified output directory.

How does static analysis find async race conditions without running the code?

Static analysis finds async races without execution by parsing code context to discover grep-style candidates, then applying context-aware checks to score and confirm concurrency findings deterministically.

Does the concurrency auditor require any dependencies to scan for resource contention?

No dependencies are required to scan for resource contention. The auditor operates independently using its internal two-layer detection approach to identify cross-process races and blocking I/O.