vyuh-labs

vyuh-labs/dxkit

Command

Code quality + slop detection. Lint summary, duplicate code (jscpd), structural metrics (graphify), and a "slop score" composite.

vyuh-labs/dxkit

Command

Close the debt the deterministic lanes cannot version-bump away: the grandfathered broken build, advisories with no direct upgrade path, the lint backlog, missing tests, missing docs. Each run plans that debt as finite work orders and works them in two tiers: deterministic recipes execute first at $0 (lockfile resync…

vyuh-labs/dxkit

Command

Run every analyzer + the dashboard in one shot. The full audit.

vyuh-labs/dxkit

Command

Suggest reviewers for a change, grounded on an active-owner model rather than a platform's naive last-touch blame.

vyuh-labs/dxkit

Command

Configure GitHub branch protection on the repo's default branch with dxkit-guardrails listed as a required status check. Without this step, the dxkit-guardrails workflow installed by init --with-ci only runs informationally — PRs can merge even if the guardrail fails. With it, merges are blocked on guardrail failures.

vyuh-labs/dxkit

Command

Configure GitHub Codespaces prebuilds for the repo so fresh Codespaces start from a prebuilt image instead of re-running the full devcontainer build.

vyuh-labs/dxkit

Command

Ranks untested source files by risk tier — surfaces what to test next, not just what's untested. CRITICAL findings first.

vyuh-labs/dxkit

Command

Convert a licenses or bom detailed JSON report into the standard 15-column BOM XLSX template.

vyuh-labs/dxkit

Command

List + install all external tools dxkit knows how to drive. The go-to command when a report says something is "unavailable.".

vyuh-labs/dxkit

Command

Remove dxkit and restore the repo's pre-dxkit state: delete every file dxkit created, and surgically reverse every additive merge dxkit made into a pre-existing file, without touching a byte the user owns. The command is dry-run by default; nothing changes until you pass --yes.

vyuh-labs/dxkit

Command

Re-generate the scaffolded files (.claude/, CLAUDE.md, etc.) while preserving files you've evolved since the original init.

vyuh-labs/dxkit

Command

Combined CLI for upgrading dxkit to a newer version. Wraps two stages — the npm binary and the in-repo scaffold — into a single command, with a plan-only preview mode that the dxkit-update agent skill consumes.

vyuh-labs/dxkit

Command

Deep security scan. Aliases: vuln. Produces a complete security report — secrets, code patterns, dependency CVEs, TLS bypasses, and remediation guidance.

vyuh-labs/dxkit

Skill Claude CodeCodex

Read a dxkit report and execute fixes — prioritize findings by severity, plan the fix sequence, run the fix, verify the score moved, re-baseline if appropriate. Supports a SCOPED pass to burn down one category at a time (dependency/BOM vulnerabilities, security, code quality, tests, docs), and a BASELINE-CLEANUP pass…

vyuh-labs/dxkit

Skill Claude CodeCodex

Manage the dxkit allowlist over its whole lifecycle — list, inspect, audit (including orphaned entries after a re-baseline), bulk-defer newly published dep-vuln advisories, remove stale entries, prune expired ones, and export Snyk-originated suppressions to a .snyk policy. Use when the user says "review our…

vyuh-labs/dxkit

Skill Claude CodeCodex

Write a dxkit extension FOR the user from a prose description of what they want extracted, verified, or delivered — pick the lowest rung (declared artifact → external script → TypeScript plugin), generate the manifest/adapter/plugin, and drive extensions dev until green. Use when the user describes a bespoke…

vyuh-labs/dxkit

Skill Claude CodeCodex

Declare and operate custom repo invariants as first-class guardrail gates — a project rule (a "no imports from X" check, an architecture script, a license audit) or the built-in per-language lint gate. Use when the user says "make our lint errors block the PR", "gate our custom check", "add a repo rule to the…

vyuh-labs/dxkit

Skill Claude CodeCodex

Edit dxkit configuration — add/remove paths in .dxkit-ignore, tune .npx vyuh-dxkit.json, adjust .dxkit/policy.json guardrail severity. Use when the user wants to exclude a directory from scanning, change scoring thresholds, or modify what blocks a PR.

vyuh-labs/dxkit

Skill Claude CodeCodex

Produce a shareable, honest snapshot of a repo — its stack, its HTTP flow spine (routes served, calls made, how they bind), and its data models — with every fact labeled observed / derived / inferred / unknown, plus a self-contained contract-map HTML you can screenshot. Use when the user says "describe this repo"…

vyuh-labs/dxkit

Skill Claude CodeCodex

Generate the documentation a repo is missing — read the Documentation dimension's gaps, orient on the real code via the graph, then write a grounded README / docstrings / API + architecture docs that move the score without tripping the slop check. Use when the user says "write docs", "document this module", "improve…

vyuh-labs/dxkit

Skill Claude CodeCodex

Run dxkit's zero-write trial — replay a repo's recent merged changes through the deterministic gate and report what it would have blocked and what enabling dxkit costs, without writing anything to the repo. Use when the user asks "would dxkit help here", "try dxkit on this repo", "what would dxkit have caught", "is…

vyuh-labs/dxkit

Skill Claude CodeCodex

Plug the repo's own extractors, inventories, and delivery sinks into dxkit as extensions — any language, no porting. Use when the user says "run our Python extractor through dxkit", "track our screens/permissions inventory", "make our custom scanner's findings gate the PR", "send dxkit reports to our…

vyuh-labs/dxkit

Skill Claude CodeCodex

Develop a new feature with the code graph as your map — orient cheaply by querying structure instead of reading whole files, implement following the patterns already in the repo, then verify the change did not regress security, tests, or quality before you push. Use when the user says "add a feature", "implement X"…

vyuh-labs/dxkit

Skill Claude CodeCodex

Repair a broken dxkit install — read doctor's structured output and walk the customer through each fix. Use when the user asks "fix dxkit", "fix my dxkit install", "doctor says X but Y is broken", "the pre-push hook isn't firing", "vyuh-dxkit command not found", or anything else that points at a broken-install state.…