Does it check for security vulnerabilities?

Yes, it specifically analyzes the codebase for OWASP Top 10 vulnerabilities, input sanitization issues, and improper secrets management.

What is included in the final audit report?

The output includes an executive health score, categorized findings with file-specific references, priority ratings (Critical to Low), and a prioritized action plan for fixes.

Can I audit specific parts of my codebase?

Yes, you can configure the skill to focus on specific areas such as security-only, performance-only, or testing assessments depending on your current needs.

How long does a typical code audit take?

The duration depends on the requested thoroughness: Quick audits take 15-30 minutes, Standard audits take 30-60 minutes, and Deep audits take over an hour for an exhaustive analysis.

Code Auditor

Name: Code Auditor
Author: mhattingpete

bymhattingpete

•

126

安全与测试

Performs comprehensive codebase analysis across architecture, security, and performance to identify technical debt and improve maintainability.

关于

The Code Auditor skill empowers developers and technical leads to gain a holistic view of project health by conducting deep-dive analyses across six critical dimensions: architecture, code quality, security, performance, testing, and maintainability. By synthesizing complex findings into prioritized reports with specific file-line references, it helps teams bridge the gap between identifying issues and implementing actionable fixes, making it an essential tool for onboarding, periodic health checks, or preparing for major production releases.

主要功能

Deep architectural analysis of module boundaries and design patterns
126 GitHub stars
Security vulnerability detection aligned with OWASP Top 10 standards
Prioritized action plans with estimated effort and implementation difficulty
Comprehensive test coverage and effectiveness assessment
Automated identification of code smells and cyclomatic complexity hotspots

使用场景

Identifying and prioritizing technical debt in legacy codebases to improve maintainability
Onboarding to a new project by quickly mapping its architecture and quality standards
Conducting a comprehensive security and performance audit before a major production release

关于

主要功能

Deep architectural analysis of module boundaries and design patterns
126 GitHub stars
Security vulnerability detection aligned with OWASP Top 10 standards
Prioritized action plans with estimated effort and implementation difficulty
Comprehensive test coverage and effectiveness assessment
Automated identification of code smells and cyclomatic complexity hotspots

使用场景

Identifying and prioritizing technical debt in legacy codebases to improve maintainability
Onboarding to a new project by quickly mapping its architecture and quality standards
Conducting a comprehensive security and performance audit before a major production release