How does repo-health detect leaked secrets?

It scans the working tree using regex patterns for common credentials, including AWS access keys, GitHub PATs, OpenAI/Anthropic API keys, and private PEM files.

Can this skill modify my repository automatically?

No, the skill generates a report with recommended actions and will always ask for user confirmation before executing any fix commands or modifying files.

What is considered a 'large blob' in the audit?

The audit flags any file over 1 MB in the git history and provides strong recommendations for removal using tools like BFG or git filter-repo for files exceeding 5 MB.

Does it support language-specific configurations?

Yes, it detects project manifests for Node.js, Python, Go, Rust, and Java to ensure your .gitignore file contains the appropriate exclusions for those ecosystems.

How does it identify stale branches?

It checks the last commit date for all local and remote branches, flagging those without activity for over 3-6 months or those marked as 'gone' on the remote.

Repo Health Audit

Name: Repo Health Audit
Author: eugener

byeugener

•

セキュリティとテスト

Audits Git repositories for security vulnerabilities, large files, and maintenance issues to ensure clean and secure codebases.

The repo-health skill performs a multi-stage diagnostic on your Git repository to identify technical debt and security risks. It scans for leaked secrets like API keys and credentials, detects large binary blobs bloat history, and identifies stale branches or forgotten stashes. Beyond security, it audits repository hygiene by checking for framework-specific .gitignore entries, unresolved merge conflicts, and commit message quality. The skill concludes with a prioritized report categorizing findings into Critical, Warning, and Info levels, providing exact commands to resolve each issue efficiently.

主な機能

012 GitHub stars

02Automated secrets scanning for AWS, OpenAI, GitHub tokens, and private keys

03Stale branch and forgotten stash detection with cleanup recommendations

04Deep history analysis to identify and optimize large binary files

05Commit hygiene analysis including message quality and merge patterns

06Project-specific .gitignore auditing for Node.js, Python, Rust, and Go

ユースケース

01Maintaining team standards for branch lifecycle and commit message consistency

02Optimizing repository size and performance by removing large historical blobs

03Performing a security audit before converting a private repository to public

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add eugener/cc-marketplace repo-health

For use in Claude.ai and ChatGPT

Download Skill