ai-debt-detector

ai-debt-detector is a skill for Claude Code from Adit-Jain-srm/skill-forge. It costs 77 tokens per session (1,055 once invoked), scanned A, original, MIT.

A review guide for finding hidden problems in code written or suggested by an AI coding agent.

In plain words
What is it for?
Auditing generated modules and pull requests for missing error handling, leaked resources, ignored failure cases, and architectural drift.
Why use it?
AI-generated code may handle the normal case while missing failures, cleanup, invented packages, or unwanted design changes.

Skill for Claude Code

Written for Claude Code: shipped in a Claude Code plugin.

Part of the skill-forge plugin — 19 skills shipped together

Good fit Auditing generated modules and pull requests for missing error handling, leaked resources, ignored failure cases, and architectural drift.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/adit-jain-srm/skill-forge/ai-debt-detector
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add Adit-Jain-srm/skill-forge --skill ai-debt-detector
Clone the repo
git clone --depth 1 https://github.com/Adit-Jain-srm/skill-forge

Made for: Claude Code.

Or install skill-forge, the plugin that ships this one along with the rest of its 19 skills.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for ai-debt-detector

README.md
[![agentmods](https://agentmods.dev/badge/skills/adit-jain-srm/skill-forge/ai-debt-detector/github.svg)](https://agentmods.dev/skills/adit-jain-srm/skill-forge/ai-debt-detector)
Your own site
<a href="https://agentmods.dev/skills/adit-jain-srm/skill-forge/ai-debt-detector"><img src="https://agentmods.dev/badge/skills/adit-jain-srm/skill-forge/ai-debt-detector/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for ai-debt-detector

Your own site · 80×15
<a href="https://agentmods.dev/skills/adit-jain-srm/skill-forge/ai-debt-detector"><img src="https://agentmods.dev/badge/skills/adit-jain-srm/skill-forge/ai-debt-detector.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 77 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 1,055 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00077 $0.01055
Opus 5 $0.00039 $0.00528
Sonnet 5 $0.00015 $0.00211
Haiku 4.5 $0.00008 $0.00105

Measured 10d ago against content hash 91fe670f33ed, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-10, from the pricing page.

Security

Grade A, and why

ai-debt-detector scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 10d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

skills/ai-debt-detector/SKILL.md · 98 lines

How it starts

The opening of the file, as written. The whole thing — 98 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Overview

AI agents generate code that passes the happy path but hides debt: missing error handling, orphaned resources, ignored failure modes, hallucinated packages, silent architectural drift. This skill forces a targeted audit for the exact patterns AI agents get wrong.

When to Use

  • After any AI code generation session (agent wrote 20+ lines)
  • Before merging AI-generated PRs
  • When code "works" but something feels off
  • After vibe-coding sprints — debt accumulates fastest here
  • When you find yourself saying "the agent said it's done"

Process

After ANY code generation, scan for these AI-specific debt patterns:

1. FAILURE MODES — What happens when this fails?
   - Network timeout? Disk full? Permission denied? Null input?
   - Is there a try/catch? Does it catch SPECIFIC errors or swallow everything?
   - Are resources cleaned up on failure? (streams closed, connections returned, temp files deleted)

2. ORPHANS — What gets created but never cleaned up?
   - Temp files, event listeners, intervals, subscriptions, connections
   - Are there corresponding cleanup/dispose/close calls for every open/create?
   - In React: does every addEventListener have a removeEventListener in cleanup?

3. EDGE CASES — What inputs break this?
   - Empty array/string? null/undefined? Very large input? Unicode? Concurrent calls?
   - Does the code assume the happy path? (hint: AI almost always does)

4. HALLUCINATED DEPS — Do all imports actually exist?
   - Is every package in package.json/requirements.txt?
   - Are API methods real? (AI invents plausible-sounding methods that don't exist)
   - Check: does this library's latest version still export this function?

5. ARCHITECTURAL DRIFT — Does this match the project's patterns?
   - Same error handling style as existing code?
   - Uses the project's established utilities (not reinventing)?
   - Follows the file structure convention?
   - Matches naming patterns (camelCase vs snake_case, etc.)

Red Flags (stop and fix IMMEDIATELY)

Read the full file on GitHub · 98 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 10d ago First seen · 98 lines · 77 tokens per session scan A 91fe670f33ed

Subscribe to this mod's changes

ai-debt-detector is a skill published in the GitHub repository Adit-Jain-srm/skill-forge (2 stars, last pushed 2mo ago), licensed MIT. It adds 77 tokens to every session and 1,055 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Related

Other skills, from other repositories

sdd-tasks

Break an SDD change into implementation tasks. Trigger: orchestrator launches task planning for a change.

Gentleman-Programming/gentle-ai · 25 tokens

pr-blocker-summarizer

Summarizes open pull requests into a blockers-first standup digest. Activates when the user asks to summarize open PRs, find blocked pull requests, generate a PR standup, or triage review backlog from a PR export.

FrancyJGLisboa/agent-skill-creator · 54 tokens

review-work

Post-implementation gate review: run manual QA on the real surface yourself, then launch ONE gate reviewer (never a panel) to audit goal, constraints, code quality, security, missed context, and QA evidence. Use before a PR handoff or when the user explicitly asks to review completed work.

code-yeongyu/oh-my-openagent · 63 tokens

user-research-cookiy

End-to-end user research assistant — qualitative and quantitative. Use this skill whenever the user mentions user research, user interviews, discussion guides, interview guides, research plans, qualitative research, quantitative research, user surveys, survey design, usability studies, participant recruitment…

cookiy-ai/user-research-skill · 154 tokens

doc-drift

Use this skill when the user wants to audit the memory and documents Claude Code loads into context — CLAUDE.md (user global + project + nested), MEMORY.md, @imports, .claude/skills, .claude/agents, .claude/commands, installed plugins — and detect four kinds of issues: outdated claims, mutually contradictory…

AlexZio00/sovereign-skills · 240 tokens

ponytail-lazy-senior-dev

Applies the "lazy senior developer" mindset. Use this skill whenever generating, modifying, reviewing code, or fixing bugs to prioritize code reuse, minimalism, YAGNI principles, and root-cause fixes. Also use whenever the user says "ponytail", "be lazy", "lazy mode", "simplest solution", "minimal solution", "yagni"…

GulajavaMinistudio/awesome-copilot-id · 146 tokens