bilge-development-kit: Skill for Claude Code

/audit - Codebase Audit

$ARGUMENTS

---

Purpose

Project-wide codebase health analysis. Unlike /review (file/PR focused), /audit examines the entire project: architecture patterns, dependency risks, complexity hotspots, and tech debt.

---

Sub-commands

/audit                - Full audit (all dimensions)
/audit architecture   - Architecture patterns and violations
/audit dependencies   - Dependency graph, outdated/vulnerable packages
/audit complexity     - Cyclomatic complexity hotspots
/audit tech-debt      - Tech debt inventory with effort estimates
/audit size           - File/module size analysis

---

Behavior

When /audit is triggered:

1. Project Discovery

Auto-collect project context using Read, Glob, and Grep tools:

1. Tech stack: Read package.json, pyproject.toml, go.mod, Cargo.toml
2. File count: Use Glob to count source files
3. Lines of code: Use Bash with simple commands (no pipes)
4. Recent commits: Use git log --oneline -10

2. Architecture Audit

Analyze project structure for:

Check	What to Look For
Pattern consistency	Is it feature-based, domain-driven, or flat? Are there violations?
Circular dependencies	Import cycles between modules
Layer violations	UI importing from DB layer, utils importing from features
Dead code	Exported but never imported files/functions
Config sprawl	Too many config files at root level
Entry point clarity	Is the app's starting point obvious?

3. Dependency Audit

# Node.js
npm audit 2>/dev/null || true
npm outdated 2>/dev/null || true

# Python
pip audit 2>/dev/null || true
pip list --outdated 2>/dev/null || true

# General
cat package-lock.json 2>/dev/null | python3 -c "import json,sys; d=json.load(sys.stdin); print(f'Total deps: {len(d.get(\"packages\",{}))}')" 2>/dev/null || true

Check for:

• Vulnerable packages — known CVEs
• Outdated majors — 2+ major versions behind
• Abandoned packages — no updates in 2+ years
• Duplicate packages — same functionality, different libs
• Bundle impact — largest dependencies by size