Code Auditor

What it does

The Code Auditor skill performs comprehensive analyses of codebases to identify potential vulnerabilities, style issues, and areas for improvement. It assesses architecture, code quality, security, performance, testing practices, and maintainability. The analysis results in a detailed report with prioritized recommendations to enhance the codebase's overall health and reduce technical debt.

When to use it

• To quickly identify critical issues within a project ("audit the code").
• When needing a thorough review of code quality and potential problems ("analyze code quality").
• For security assessments, specifically looking for common vulnerabilities ("security audit").
• To understand the overall architecture and design patterns used in a codebase ("review the codebase").
• To uncover areas of technical debt that may impact future development ("find technical debt").
• When needing to evaluate performance bottlenecks within an application ("performance review").

Key capabilities

• Architecture & Design Analysis: Evaluates structure, design patterns, module boundaries, and dependency management.
• Code Quality Assessment: Identifies complexity hotspots, code duplication, naming inconsistencies, and anti-patterns.
• Security Vulnerability Detection: Checks for common vulnerabilities (OWASP Top 10), input validation issues, and secrets management problems.
• Performance Review: Examines algorithmic complexity, database queries, memory usage, and caching opportunities.
• Testing Evaluation: Assesses test coverage, quality, missing scenarios, and integration/unit test balance.
• Maintainability Analysis: Evaluates technical debt, coupling, ease of future changes, and documentation quality.
• Thoroughness Levels: Offers Quick (15-30 min), Standard (30-60 min), and Deep (60+ min) analysis options.

Example prompts

• "Code Auditor: audit the code for security vulnerabilities."
• "Code Auditor: analyze code quality, focusing on potential performance issues."
• "Code Auditor: review the codebase with a standard thoroughness level."

Tips & gotchas

• The skill utilizes the Explore agent in "thorough mode," which can take significant time depending on the size of the codebase.
• Analysis depth is configurable (Quick, Standard, Deep) to balance speed and comprehensiveness. Start with Quick for a fast overview.
• The output is structured as a report including an executive summary, findings categorized by area, prioritized action plan, and key metrics.