code audit skills

jar-analyzer/jar-analyzer-claude

Skill Claude CodeCodex

A tool for turning Java JAR, WAR, or class files into an SQLite database for analysis. A JAR or WAR is a packaged Java application or library.

jar-analyzer/jar-analyzer-claude

Skill Claude CodeCodex

A set of queries for auditing Java code using an SQLite database built from compiled files. It can search method calls, follow call chains, inspect Spring components, find strings, and detect vulnerability patterns.

haibindev/repo-scan

Skill Claude CodeCodex

A source-code auditing skill that examines a project directory and creates a detailed inventory of its code, modules, technologies, files, and build systems. It supports projects containing several related subprojects.

apoorvjain25/production-audit

Skill Claude CodeCodex

Exhaustive production-readiness audit of any codebase or product. Runs diverse-angle discovery passes until two consecutive passes find nothing new, adversarially verifies every finding against the real code, and reports one flat severity-tagged list with file:line evidence. No summary, no hedging.

UserB1ank/code-audit-system

Skill Claude CodeCodex

CVE-oriented multi-agent code audit system. Use when user provides a git repository URL for vulnerability discovery with the goal of submitting CVEs. This skill orchestrates subagents to find exploitable vulnerabilities (RCE, SQLi, Auth Bypass, etc.), write weaponized POCs, and generate CVE-ready reports. ALWAYS use…

jeffrigby/somepulp-agents

Skill Claude CodeCodex

Systematic methodology for comprehensive codebase analysis — security review, technical debt identification, dead code detection, code quality checks, and best-practices verification against official library documentation.

jeffrigby/somepulp-agents

Skill Claude CodeCodex

Methodology for keeping project documentation current, consistent, and optimized for AI coding agents — CLAUDE.md optimization, README synchronization, CHANGELOG updates, and documentation freshness audits.

Asixa/codemap-skill

Skill Claude CodeCodex

Generate and incrementally maintain an interactive architecture map plus a per-module code-quality audit (health scores 0-100, smell findings, lines-of-code, and a clickable dependency graph) for any codebase. Use when the user wants to visualize a project's functional modules, audit or score code quality, check…

danygiguere/audit-skills

Skill Claude CodeCodex

Blocking I/O in async contexts checklist. Use when reviewing async/await code, event-loop or reactor-based services, coroutines, or worker/thread pools — sync calls in async handlers, CPU work on the event loop, sync-over-async, blocking sleeps, missing timeouts.

danygiguere/audit-skills

Skill Claude CodeCodex

Query cardinality checklist. Use when an UPDATE or DELETE keys on a non-unique column (e.g. WHERE name = ?) and may hit the wrong rows, when findOne/.single()/.first() runs on a non-unique field, or when a column is treated as unique in app code without a database UNIQUE constraint.

danygiguere/audit-skills

Skill Claude CodeCodex

Full security, correctness, and operability audit of code. Use when reviewing a diff, endpoint, or feature for vulnerabilities or bugs without a specific topic in mind — security review, audit, code review for safety, "check this for issues".

sturec5/code-audit-protocol

Skill Claude CodeCodex

Audit a code change before it ships. Use for any request to audit, review, check, or vet a commit, diff, PR, feature, or release, in any language — including "is this safe to ship" and "what did I miss". Use it instead of improvising a review: an ad-hoc read of the diff is not a substitute, and it omits the record of…

KyaniteLabs/checkyourself

Skill Claude CodeCodex

Use this capability for threat modeling, secure code review, OWASP risk review, API abuse, input/output validation, injection, XSS, CSRF, SSRF, deserialization, security headers, encryption, secrets exposure, audit logging, privacy-by-design, or security acceptance gates.

KyaniteLabs/checkyourself

Skill Claude CodeCodex

Use this capability for hosting decisions, platform selection, container deployment, serverless deployment, domains, DNS, TLS, staging/production environments, blue-green, canary, rolling deploys, migrations during deploy, health checks, smoke tests, and rollback plans.

KyaniteLabs/checkyourself

Skill Claude CodeCodex

Production-readiness diagnostics and guided remediation for AI-built apps using CheckYourself. Use when the user asks for a pre-launch audit, production readiness score, evidence-backed findings register, safest first fix batch, learning plan, optional dashboard, or a read-only reality check before shipping a…

escoffier-labs/skillet

Skill Claude CodeCodex

Use before implementing, scaffolding, prototyping, or adding a feature when the work should start with the smallest useful code path, avoid speculative architecture, or prevent overbuilding before reduce would be needed.

escoffier-labs/skillet

Skill Claude CodeCodex

Use when conducting a large backlog or multi-repository campaign across several worker lanes, especially when work needs bounded ownership, held dependencies, collision control, draft pull request gates, and evidence-based landing. Triggers on "conduct the fleet", "burn down the backlog", "run a multi-repo campaign"…

escoffier-labs/skillet

Skill Claude CodeCodex

Use when the current session needs an answer or a work product from a model on ANOTHER vendor's stack - a second opinion from a different model family, a cheap fast model for bulk work, or a cross-model review - by dispatching that vendor's own CLI as a one-shot worker. Triggers include "ask…

keaizuizui/CodeRef-AI

Skill Claude CodeCodex

A documentation workflow for turning useful project designs into reusable, recorded assets. It tracks an asset from identification and registration through explanation and reuse.

keaizuizui/CodeRef-AI

Skill Claude CodeCodex

A workflow guide for using CodeRef-AI tools to organize and improve existing software projects. It groups the work into five stages covering mapping, refactoring, checking, health reviews, and follow-up work.

keaizuizui/CodeRef-AI

Skill Claude CodeCodex

A project-audit skill that uses CodeRef-AI’s MCP tools to inspect code, query a map of project knowledge, and verify development workflows. MCP is a standard way for an agent to use external tools.

Dtdkvn/codex-oi

Skill Claude CodeCodex

Codex CLI second-opinion bridge for Claude Code. Wraps both codex exec (prompt-driven) and codex review (diff-driven) under one workflow with shared project-context preamble, filesystem boundary, JSON stream parsing, and a structured findings table. Five modes: review — custom-prompt audit of file/folder plan …

r00tbear/project-context-skill

Skill Claude CodeCodex

Audit, bootstrap, refresh, visualize, review, or upgrade technology-neutral Project Context for a Git repository shared by Claude Code and Codex. Use for repository audits and greenfield planning; PROJECTCONTEXT.md/CLAUDE.md/AGENTS.md setup; architecture, stack, debt, security, testing, UI, and data guidance…

AndrewDongminYoo/rn-agents-kit

Skill Claude CodeCodex

Use when a React Native project has messy assets — unreferenced/unused image, SVG, or Lottie files, scattered or deeply-relative require() paths, or string-based asset references you want made type-safe. Audits first (read-only), then offers git-safe cleanup. Wraps the rn-typed-assets CLI.