kevinslin/audit
active/audit/SKILL.md
Audit a repo for code quality issues using focused heuristics.
$ install --global
skillsauthnpx skillsauth add kevinslin/skills auditInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: May 10, 2026, 7:07 AM159.5s2 files scanned
SKILL.md
- name:
- audit
- description:
- Audit a repo for code quality issues using focused heuristics.
- dependencies:
- []
Audit
Keep this file lean. Use it only to route the agent to the right subcommand reference.
Subcommands
When the user clearly asks for one of these flows, lead with that subcommand and read the matching reference before acting. If the user names an unsupported audit, say so instead of inventing a workflow.
slop: Audit a codebase for likely LLM-generated code slop such as cargo-cult abstractions, dead helpers, generic wrappers, and code that looks plausible in isolation but does not fit the repo. See./references/slop.md.
Maintenance Rules
- Put the full workflow, heuristics, guardrails, and output requirements for each subcommand in
./references/{command}.md. - Add one reference file per subcommand and keep filenames identical to the subcommand name.
- Do not duplicate detailed command behavior in this file. Keep only routing guidance here.
- Prefer adding a new subcommand for a new audit heuristic instead of stretching
slopto cover unrelated smells.
Related Skills
kevinslin/html2site
development
VerifiedTrustedCommunity
Convert an existing static HTML site into a private Codex Site, optionally adding a persistent authenticated API and local programmatic writes. Use only when deliberately invoked as $html2site.
22SKILL.mdUpdated Aug 22, 2026
kevinslin/event-report
business
VerifiedTrustedCommunity
Research verified local events and create ranked, source-linked activity reports.
22SKILL.mdUpdated Aug 19, 2026
kevinslin/cal
development
VerifiedTrustedCommunity
Preview available meeting options and create Google Calendar invites with attendee availability and room booking after confirmation. Use when directly invoked via $cal or when asked to schedule a meeting.
22SKILL.mdUpdated Aug 19, 2026
kevinslin/aggit
testing
VerifiedTrustedCommunity
Manage Git preflight, branches, worktrees, pushes, and completed-work cleanup. Use whenever creating a pr or when explicitly invoked.
22SKILL.mdUpdated Jul 27, 2026