repo-health

Automate repository health audits across code quality, documentation, tests, and security.

Updated Jun 29, 2026

Search Tags:#code quality #security review #test suite #license compliance #repository audit

Ready to run

npx skills add https://github.com/handbrianc/skill-library --skill repo-health-handbrianc

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: repo-health
Source: https://github.com/handbrianc/skill-library/tree/main/skills/repo-health
Command: npx skills add https://github.com/handbrianc/skill-library --skill repo-health-handbrianc

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires gitnexus, eslint, npm, syft, grype, semgrep, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill automates the process of conducting thorough repository health audits, identifying issues in code quality, documentation, specifications, tests, security, and supply chain.

Core Features & Use Cases

Code Quality Analysis: Identifies dead code, cognitive complexity, and duplicate code.
Documentation Audit: Checks for completeness, accuracy, and link rot.
Spec Alignment: Ensures code aligns with OpenSpec specifications.
Test Suite Health: Analyzes test presence, coverage, and performance.
Security Review: Scans for vulnerabilities, credential exposure, and license compliance.
Use Case: Run this Skill on a repository to automatically conduct a full audit and generate a prioritized action plan.

Quick Start

Run the 'repo-health' skill on your repository to start the audit process.

Frequently Asked Questions about repo-health

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I automate a repository health audit for code quality and security?▼

Automate a repository health audit by running the repo-health skill to scan code quality, documentation, tests, security, and supply chain. It leverages GitNexus, ESLint, and NPM audit to identify issues and generate a prioritized action plan for compliance.

What does a comprehensive repository audit check for in a software project?▼

A comprehensive repository audit checks for dead code, cognitive complexity, duplicate code, documentation link rot, test coverage, credential exposure, and license compliance. It aligns code with OpenSpec specifications to ensure overall project health and security.

Can I use ESLint and NPM audit for security and supply chain vulnerability scanning?▼

Yes, you can use ESLint and NPM audit for security and supply chain scanning within the repository health audit. The skill integrates these tools alongside syft and grype to detect vulnerabilities, credential exposure, and license compliance issues automatically.

How do I check my codebase for OpenSpec specification alignment and documentation completeness?▼

Check OpenSpec specification alignment and documentation completeness by running the repository audit skill. It automatically verifies that code aligns with OpenSpec specifications and audits documentation for accuracy, completeness, and link rot.

What tools are required to run a full codebase health and security review?▼

To run a full codebase health and security review, the required tools include GitNexus, ESLint, NPM, syft, grype, and semgrep. These dependencies enable the automated scanning of code quality, test suite health, and supply chain vulnerabilities.