skills.rest
ncsound919
ncsound919COMMUNITY
Explore all skills by this author →
WebsiteGitHub

repo-audit

Audit Git repositories for issues, code smells, and security vulnerabilities.

Updated Apr 28, 2026
Search Tags:#git#security#audit#code-quality#static-analysis#report
One-click install
npx skills add https://github.com/ncsound919/deterministic-brain --skill repo-audit-ncsound919
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: repo-audit
Source: https://github.com/ncsound919/deterministic-brain/tree/main/skill_packs/openclaw_imported/repo-audit
Command: npx skills add https://github.com/ncsound919/deterministic-brain --skill repo-audit-ncsound919

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Audit a Git repository for issues, code smells, and security vulnerabilities, helping teams reduce audit time and improve code health.

Core Features & Use Cases

  • Static analysis across the repository to surface potential bugs and vulnerabilities.
  • Generates a JSON report summarizing findings with severity levels for easy remediation.
  • Suitable for CI pipelines, pre-merge checks, and periodic security reviews.

Quick Start

Run the repo-audit tool against your project to generate a structured JSON findings report.

Frequently Asked Questions about repo-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit a Git repository for security vulnerabilities and code smells?▼

Static analysis of a Git repository involves scanning the source code to surface potential bugs, security vulnerabilities, and code smells without executing the program. This process generates a summarized JSON report detailing findings and severity levels for easy remediation.

Can I run a static code analysis audit for CI pipelines and pre-merge checks?▼

Yes, you can run a static code analysis audit for CI pipelines and pre-merge checks. The skill is explicitly suitable for integrating into these workflows to help teams reduce audit time and improve overall code health before merging.

Do I need a GITHUB_TOKEN and Docker to perform a code security audit?▼

Yes, you need a GITHUB_TOKEN and Docker to perform a code security audit with this tool. These essential tools provide the necessary environment access to clone repositories and execute the static analysis checks.

What is the best way to generate a JSON report detailing code quality findings and severities?▼

The best way to generate a JSON report detailing code quality findings and severities is to run a dedicated static analysis audit on your Git repository. This process evaluates the codebase and outputs a structured JSON report for easy remediation tracking.

Does static analysis work for both open-source and private repositories of varying languages?▼

Yes, static analysis works for both open-source and private repositories of varying languages. The audit skill is applicable across diverse codebases to identify issues, security vulnerabilities, and code smells.

Related Skills

Explore More Software Engineering Skills→
zhu637882-stackzhu637882-stack

env-setup

Detect, install, and configure Homebrew, Node.js, pnpm, PostgreSQL, Redis, Git, then output a summary.

Community
Advanced
ubie-ossubie-oss
16

security-review

Audit Terraform provider Go code, dependencies, and secrets with gosec, trunk, osv-scanner, and trivy.

Official
Advanced
Ming-Kai-LCMing-Kai-LC

crossvit-covid19-fyp

Classify COVID-19 chest X-ray images using a CrossViT dual-branch architecture.

Community
Advanced
RangeyRoverRangeyRover
3

speckit.checker

Run static analysis across multiple languages and generate prioritized issue reports.

Community
Intermediate