skill-candidates/code-gap-sweeping/SKILL.md
Sweep one or more local repositories for implementation gaps and produce deterministic, evidence-backed remediation lanes. Use when you need cross-repo detection of missing tests, docs lockstep drift, risky TODO/FIXME additions, and release-hygiene misses.
npx skillsauth add grtninja/skill-arbiter code-gap-sweepingInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
Use this skill to run a repeatable cross-repo gap scan and convert findings into concrete follow-up actions.
critical, high, medium).python3 "$CODEX_HOME/skills/code-gap-sweeping/scripts/code_gap_sweep.py" \
--repo "<PRIVATE_REPO_A>=/path/to/<PRIVATE_REPO_A>" \
--repo "<PRIVATE_REPO_B>=/path/to/<PRIVATE_REPO_B>" \
--since-days 14 \
--json-out /tmp/code-gap-sweep.json
One-command sweep for all repos under a workspace root:
python3 "$CODEX_HOME/skills/code-gap-sweeping/scripts/code_gap_sweep.py" \
--repos-root "$env:USERPROFILE\\Documents\\GitHub" \
--exclude-repo "docs" \
--since-days 14 \
--json-out /tmp/code-gap-sweep-all.json
Working-tree focused sweep during active local edits:
python3 "$CODEX_HOME/skills/code-gap-sweeping/scripts/code_gap_sweep.py" \
--repo "skill-arbiter=." \
--diff-mode working-tree \
--json-out /tmp/code-gap-sweep-working-tree.json
Full pipeline matrix for repo families (repo_a/repo_b/repo_c/repo_d):
python3 "$CODEX_HOME/skills/code-gap-sweeping/scripts/repo_family_pipeline.py" \
--repo "<PRIVATE_REPO_A>=/path/to/<PRIVATE_REPO_A>" \
--repo "<PRIVATE_REPO_B>=/path/to/<PRIVATE_REPO_B>" \
--repo "<PRIVATE_REPO_C>=/path/to/<PRIVATE_REPO_C>" \
--repo "<PRIVATE_REPO_D>=/path/to/<PRIVATE_REPO_D>" \
--family "<PRIVATE_REPO_A>=repo_a" \
--family "<PRIVATE_REPO_B>=repo_b" \
--family "<PRIVATE_REPO_C>=repo_c" \
--family "<PRIVATE_REPO_D>=repo_d" \
--since-days 14 \
--json-out /tmp/repo-family-pipeline.json \
--bash-out /tmp/repo-family-pipeline.sh
Use this skill when the primary task is detecting and prioritizing implementation gaps across repositories.
Do not use this skill for:
skill-arbiter-lockdown-admission).skills-discovery-curation).The script detects deterministic gap categories:
tests_missing: code changed without corresponding test changes.docs_lockstep_missing: behavior-impacting files changed without docs updates.todo_fixme_added: newly introduced TODO/FIXME markers in the patch window.release_hygiene_missing: release-impacting changes without pyproject.toml + CHANGELOG.md updates.Route findings consistently:
tests_missing -> repo-specific execution/test lane.docs_lockstep_missing -> docs-alignment-lock.todo_fixme_added -> repo-specific cleanup lane, then re-sweep.release_hygiene_missing -> skill-arbiter-release-ops.JSON report includes:
generated_at, since_days, repo list)references/gap-rubric.mdscripts/code_gap_sweep.pyreferences/repo-family-pipeline.mdscripts/repo_family_pipeline.pyIf this lane is unresolved, blocked, or ambiguous:
$skill-hub for chain recalculation.tools
Run a defender-first security sweep on code, configs, prompts, model/tooling surfaces, or third-party contribution lanes. Use when a request involves safe bug, leak, zero-day-class, exploit, or hack hunting for protection, when contributing to outside repositories and you want a focused security pass, or when touching auth, secrets, permissions, network exposure, prompt/tool boundaries, data flow, or update/build surfaces. This skill is defensive only and must never be used for weaponization or unauthorized access.
development
Validate and repair VRM Sandbox startup acceptance with shim-first local model authority, frontend/backend bring-up, and avatar-runtime launch proof. Use when launch behavior, chat handoff, voice fallback, or runtime bridge acceptance must be verified end to end.
documentation
Align documented voice-command catalogs, endpoint action allowances, and live runtime handlers so operator-visible voice surfaces match what the stack can actually execute. Use when voice command docs, parser matrices, endpoint permissions, or runtime action routing drift apart.
development
Track SkillHub trend and topic drift, maintain a bounded rewrite watchlist, and surface emerging gaps worth turning into repo-owned skills. Use when the marketplace query set shows new families or when the current shortlist has gone stale.