speckit.checker

Run static analysis tools to detect linting, type, and security issues across source code.

Updated Oct 4, 2025
One-click install
npx skills add https://github.com/peancharoen/lcbp3 --skill speckit-checker-peancharoen
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: speckit.checker
Source: https://github.com/peancharoen/lcbp3/tree/main/.agents/skills/speckit.checker
Command: npx skills add https://github.com/peancharoen/lcbp3 --skill speckit-checker-peancharoen

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

The skill automates discovery and execution of static analysis and security scanners to surface lint, type, and vulnerability issues across a codebase, removing the manual effort of running disparate tools and consolidating noisy outputs.

Core Features & Use Cases

  • Auto-detection: Identifies project types and relevant tool configs (package.json, pyproject.toml, go.mod, Cargo.toml, pom.xml) to select appropriate linters and scanners.
  • Multi-tool Execution: Runs linters, type checkers, and security audits (ESLint/TS, Ruff/Pylint, golangci-lint, clippy, npm audit, cargo audit, etc.) and collects results.
  • Aggregation & Prioritization: Deduplicates findings, assigns priorities (security P1/P3, type errors P2, lint/style P3-P5), and generates an actionable report suitable for CI gating or developer triage.

Quick Start

Run the speckit.checker skill to analyze the current repository, aggregate linter/type/security findings, and produce a prioritized report for fixes.

Frequently Asked Questions about speckit.checker

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run static analysis and security scanning across a multi-language repository?

To run static analysis across a multi-language repository, use a tool that auto-detects project files like package.json, pyproject.toml, go.mod, and Cargo.toml to execute configured linters and security scanners. It aggregates findings into a single prioritized report.

What is the best way to consolidate linting, type checking, and vulnerability scan results for CI gating?

The best way to consolidate linting, type checking, and vulnerability scan results is to use a unified static analysis tool that deduplicates findings, assigns priorities like P1 for security and P2 for type errors, and generates reports with exit codes for CI gating.

Can I automatically detect and run the correct linters for Node, Python, Go, and Rust projects?

Yes, you can automatically detect and run linters for Node, Python, Go, and Rust by scanning for supported configuration files. The tool identifies relevant configs and executes corresponding linters like ESLint, Ruff, golangci-lint, and clippy.

Does unified static analysis prioritize security vulnerabilities over linting and style issues?

Yes, unified static analysis prioritizes security vulnerabilities over linting and style issues by assigning severity levels. Security findings are marked P1, type errors are P2, and lint or style issues are categorized from P3 to P5 for triage.

How do I aggregate noisy outputs from multiple linters and security scanners into an actionable report?

You can aggregate noisy outputs from multiple linters and security scanners by using a tool that deduplicates findings across ESLint, Ruff, npm audit, and cargo audit. It consolidates results into a unified, prioritized report with actionable fixes.