project-maintenance

Run complexity, security, and dead-code audits to produce a Markdown maintenance report.

Updated Nov 7, 2025
One-click install
npx skills add https://github.com/IKcoding-jp/Roast-Plus --skill project-maintenance
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: project-maintenance
Source: https://github.com/IKcoding-jp/Roast-Plus/tree/main/.claude/skills/project-maintenance
Command: npx skills add https://github.com/IKcoding-jp/Roast-Plus --skill project-maintenance

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires lizard, and includes scripts (resource) components.

What problem does it solve?

This skill integrates complexity analysis, security auditing, and dead-code detection into a single automated workflow to surface refactor targets and improve code health.

Core Features & Use Cases

  • Unified audit suite: runs complexity (CCN/NLOC), security (Gitleaks/npm audit), and dead-code checks (Knip) in one command and compiles a prioritized report.
  • Actionable guidance: generates a maintenance report with a clear prioritization of refactors and security fixes for release planning.
  • Use case: In a mid-sized project, run the audit before merging a PR to identify the biggest hotspots and auto-create a prioritized plan.

Quick Start

Execute the integrated maintenance script to produce the consolidated report.

Frequently Asked Questions about project-maintenance

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I prioritize code refactors and security fixes in a single audit?

An integrated maintenance audit combines complexity analysis, security auditing, and dead-code detection into a single prioritized Markdown report, identifying refactor targets and security hotspots to guide release planning.

What does complexity analysis with Lizard measure for refactor prioritization?

Lizard measures cyclomatic complexity (CCN) and lines of code (NLOC) to identify code hotspots, surfacing high-complexity functions that serve as prime refactor targets to improve code health.

Do I need Gitleaks and Knip installed to run a dead-code and security audit?

Yes, Gitleaks, Knip, and npm audit must be installed alongside Lizard to execute the full unified audit suite, enabling security scanning and dead-code detection checks that compile into the consolidated maintenance report.

Can I generate a maintenance report before merging a pull request?

Yes, executing the integrated audit script before merging a PR runs complexity, security, and dead-code checks to identify the biggest hotspots, auto-creating a prioritized remediation plan for the project.

What's the best way to identify dead code and security vulnerabilities together?

Running a unified audit suite integrates Knip for dead-code detection and Gitleaks for secret scanning, compiling findings into a single actionable Markdown report that prioritizes both refactor and security remediation.

Does the maintenance audit output to a file or only standard output?

The maintenance audit outputs the consolidated Markdown report to either stdout or a file, allowing teams to capture prioritized refactor and security remediation guidance directly in their development environment.