What does the architecture debate feature do?

It simulates a discussion between three personas—a Pragmatist, a Purist, and a Maintainer—to provide balanced architectural advice on your code.

Can it detect security vulnerabilities?

Yes, it runs multi-layer security scans using tools like Semgrep, Trivy, and Gitleaks to find vulnerabilities, leaked secrets, and OWASP risks.

How do I get started with the audit tools?

Simply run the /code-quality:setup command to automatically install and configure the necessary quality and security tools for your project.

Does it help with Test-Driven Development (TDD)?

Yes, it includes a dedicated TDD workflow that manages the RED-GREEN-REFACTOR cycle with automated test watchers.

Which frameworks are supported by this skill?

This skill is specifically optimized for Drupal (using PHPStan, PHPMD, and DDEV) and Next.js (using ESLint and Jest) projects.

Code Quality Audit

Name: Code Quality Audit
Author: camoa

bycamoa

•

安全与测试

Performs comprehensive code quality and security audits for Drupal and Next.js projects using industry-standard tooling and automated workflows.

This skill provides a robust framework for maintaining high-quality codebases by automating audits for security vulnerabilities, SOLID/DRY principle violations, and test coverage. It integrates deeply with Drupal (via DDEV and PHPStan) and Next.js (via ESLint and Jest), offering specific commands for everything from first-time tool setup to multi-layer security scans. Whether you need a quick lint check before a push or a full architecture debate involving multiple perspectives, this skill ensures your code meets production-ready standards and best practices.

主要功能

0117 GitHub stars

02Automated SOLID and DRY principle violation detection for cleaner architecture

03Interactive TDD (Test-Driven Development) workflows and coverage reporting

04Multi-layer security scanning including Semgrep, Trivy, and Gitleaks integration

05Deep framework support for Drupal (PHP/DDEV) and Next.js (React/TypeScript)

06Comprehensive rubric-scored code reviews with quality gate assessments

使用场景

01Performing automated code reviews to identify architectural weaknesses and technical debt

02Running a full security and vulnerability audit before deploying to production

03Setting up standardized linting, testing, and static analysis tools in a new project

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add camoa/claude-skills code-quality-audit

For use in Claude.ai and ChatGPT

Download Skill