Can it detect hardcoded secrets?

Yes, the security audit mode specifically scans for hardcoded credentials, API keys, and tokens across the entire codebase using cross-file reasoning.

What happens if my codebase is too large for the context window?

The skill includes a token estimation step and will suggest narrowing the scope to specific directories or using the chunked '/ork:verify' fallback if the limit is exceeded.

Does this require a specific Claude version?

Yes, it is optimized for Opus 4.6 and requires a Tier 4+ account to access the 1M context window feature for full-project analysis.

Do I need an MCP server to use this skill?

Yes, this skill requires the memory MCP server to function correctly and manage complex project nodes during the analysis phase.

Full-Codebase Audit & Analysis

Name: Full-Codebase Audit & Analysis
Author: yonatangross

byyonatangross

•

Security & Testing

Performs a deep-dive, single-pass audit of entire projects to identify security vulnerabilities, architectural flaws, and dependency risks using a 1M context window.

The Full-Codebase Audit skill leverages Claude's massive 1M context window to provide a holistic view of your project that traditional chunked analysis often misses. By loading up to 100,000 lines of code into a single session, it can trace complex data flows across multiple files, detect subtle architectural violations, and perform comprehensive dependency checks. This skill is essential for production-ready reviews, pre-deployment security assessments, and refactoring large systems where cross-module understanding is critical for maintaining code integrity.

Key Features

01Detailed executive reporting with prioritized severity classifications and remediation steps

02Automated dependency auditing for known CVEs and license compliance

03Single-pass analysis of up to 100K lines of code using extended context windows

04Cross-file security vulnerability detection and sensitive data flow tracing

05Architectural pattern consistency and module coupling analysis

0692 GitHub stars

Use Cases

01Auditing third-party dependencies for security vulnerabilities and licensing risks

02Mapping architectural debt and circular dependencies in a legacy codebase

03Conducting a final security and quality gate review before a major production release

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add yonatangross/orchestkit audit-full

For use in Claude.ai and ChatGPT

Download Skill