skills.rest
handbrianc
handbriancCOMMUNITY
Explore all skills by this author →
GitHub

repo-health

Automate repository health audits across code quality, documentation, tests, and security.

Updated Jun 29, 2026
Search Tags:#code quality#security review#test suite#license compliance#repository audit
One-click install
npx skills add https://github.com/handbrianc/skill-library --skill repo-health-handbrianc
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: repo-health
Source: https://github.com/handbrianc/skill-library/tree/main/skills/repo-health
Command: npx skills add https://github.com/handbrianc/skill-library --skill repo-health-handbrianc

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires gitnexus, eslint, npm, syft, grype, semgrep, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill automates the process of conducting thorough repository health audits, identifying issues in code quality, documentation, specifications, tests, security, and supply chain.

Core Features & Use Cases

  • Code Quality Analysis: Identifies dead code, cognitive complexity, and duplicate code.
  • Documentation Audit: Checks for completeness, accuracy, and link rot.
  • Spec Alignment: Ensures code aligns with OpenSpec specifications.
  • Test Suite Health: Analyzes test presence, coverage, and performance.
  • Security Review: Scans for vulnerabilities, credential exposure, and license compliance.
  • Use Case: Run this Skill on a repository to automatically conduct a full audit and generate a prioritized action plan.

Quick Start

Run the 'repo-health' skill on your repository to start the audit process.

Frequently Asked Questions about repo-health

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate a repository health audit for code quality and security?▼

Automate a repository health audit by running the repo-health skill to scan code quality, documentation, tests, security, and supply chain. It leverages GitNexus, ESLint, and NPM audit to identify issues and generate a prioritized action plan for compliance.

What does a comprehensive repository audit check for in a software project?▼

A comprehensive repository audit checks for dead code, cognitive complexity, duplicate code, documentation link rot, test coverage, credential exposure, and license compliance. It aligns code with OpenSpec specifications to ensure overall project health and security.

Can I use ESLint and NPM audit for security and supply chain vulnerability scanning?▼

Yes, you can use ESLint and NPM audit for security and supply chain scanning within the repository health audit. The skill integrates these tools alongside syft and grype to detect vulnerabilities, credential exposure, and license compliance issues automatically.

How do I check my codebase for OpenSpec specification alignment and documentation completeness?▼

Check OpenSpec specification alignment and documentation completeness by running the repository audit skill. It automatically verifies that code aligns with OpenSpec specifications and audits documentation for accuracy, completeness, and link rot.

What tools are required to run a full codebase health and security review?▼

To run a full codebase health and security review, the required tools include GitNexus, ESLint, NPM, syft, grype, and semgrep. These dependencies enable the automated scanning of code quality, test suite health, and supply chain vulnerabilities.

Related Skills

Explore More Software Engineering Skills→
hardw00thardw00t
90

sca-security

Scan dependencies for CVEs and audit licenses across software projects.

Community
Advanced
Nuwanda04Nuwanda04

Dependency Auditor

Analyze software dependencies for CVEs and license compliance across multiple languages.

Community
Advanced
TECHKNOWMAD-LABSTECHKNOWMAD-LABS

security-audit

Scan code repositories for vulnerabilities and leaked secrets using static analysis tools.

Official
Advanced
Serg28Serg28

security-reviewer

Automate security audits with semgrep, trivy, gitleaks, and dependency scanners.

Community
Intermediate