Audit Skill is an Agent Skill with 14 audit types. Catches issues before you push, and goes deep when you need it.

Branch audit (default) — Reviews your branch diff against 8 categories and gives a Clean/Minor/Blocking verdict:

• Secrets and credentials
• Unintended changes
• Debug artifacts
• Test coverage
• Build and suite
• Commit hygiene
• Integration check
• Merge conflicts and rebase state

Deep-dive audits — 13 project-wide analyses using sub-agents:

• Code quality — duplication, inconsistency, simplification opportunities
• Documentation brittleness — fragile references, over-specified details, staleness risk
• Documentation-code sync — docs that have already drifted from the code
• Language best practices — idiomatic patterns for Python, JS/TS, Go, Rust, Java, Ruby, Shell
• Concurrency — shared mutable state, race conditions, deadlock risk, thread/goroutine leaks
• Resource management — file handle leaks, unclosed connections, zombie processes, temp files
• Test quality — weak assertions, flaky patterns, test isolation, missing negative tests
• Feature completeness — documented features vs actual implementation, missing endpoints
• Performance — N+1 queries, unbounded caches, hot-path allocations, blocking I/O
• Bug patterns — shallow merges, serialization mismatches, silent data loss, stale closures
• Design philosophy compliance — evaluate code against the project's own stated principles
• Security vulnerabilities — injection, auth, data exposure, dependency risks, config
• UI design — review using CRAP principles (Contrast, Repetition, Alignment, Proximity)

/plugin marketplace add adewale/audit-skill
/plugin install audit@adewale-audit

npx skills add adewale/audit-skill

Skills appear on skills.sh automatically after users install the repo with the skills CLI. Install counts and leaderboard rankings come from anonymous CLI telemetry; opt out with DISABLE_TELEMETRY=1. The repo page customization in skills.sh.json is picked up after the repository is seen by telemetry and the cache refreshes.

The installable skill directory is skills/audit. It uses the Agent Skills SKILL.md format and is configured for Codex, OpenCode, Pi, Gemini CLI, and Claude Code.

Copy the canonical skill directory into your agent's skills directory:

gh repo clone adewale/audit-skill
cp -R audit-skill/skills/audit ~/.claude/skills/audit
cp -R audit-skill/skills/audit ~/.codex/skills/audit
cp -R audit-skill/skills/audit ~/.config/opencode/skills/audit

Invoke with /audit where slash commands are available, or ask your agent directly:

> /audit
> audit
> review my changes before I push
> check what I'm about to push
> run a concurrency audit
> audit test quality
> do a security audit
> check for performance issues
> are our docs up to date with the code?
> review the UI design

## Summary

| #  | Category                | Finding                                        | Severity |
|----|-------------------------|------------------------------------------------|----------|
| 1  | Secrets and credentials | Live Stripe secret key hard-coded in source    | Blocking |
| 2  | Debug artifacts         | print() debug statement on line 7              | Blocking |
| 3  | Test coverage           | No tests for any new payment code              | Blocking |

Verdict: **Blocking** — issues that should be fixed before pushing.

Verdict: **Clean** — no findings, safe to push.

Tested across 6 scenarios with and without the skill:

Branch audits (3 scenarios: dirty/clean/mixed branches):

Deep-dive audits (3 scenarios: concurrency/test quality/performance):

The skill's primary value is consistent structured output — Clean/Minor/Blocking verdicts, systematic checklists, and organized report formats. Detection of issues is similar either way since Claude is already good at finding problems. The skill ensures they're reported in a reliable, repeatable format.

MIT