Md Audit
Read-only code quality audit, scan the current working directory for common issues...
Install
npx skills add HarnessMD/munder-difflin --skill md-audit -g -a claude-code -y- Repository
- HarnessMD/munder-difflin9.3k
- Category
- Security
- Updated
- 3d ago
- License
- MIT
- Context cost
- Lightabout 238 tokens
- Runs scripts
- No, instructions only
What it does
Read-only code quality audit, scan the current working directory for common issues (bugs, dead code, security hotspots, missing error handling) and return a prioritised findings report. No files are edited. Use when asked to "audit the code", "quick audit", "find issues", "code scan", or "what's wrong with this codebase". (munder-difflin)
Code Audit (read-only)
Perform a read-only code quality scan and return a findings report. Do NOT edit any files.
Steps:
- Scope, identify the primary language and entry points (
package.json,Cargo.toml,go.mod,pyproject.toml, or similar). - Scan, use
GrepandReadto look for:- Unhandled promise rejections / ignored errors
- Hard-coded secrets or credentials (keys, tokens, passwords)
TODO/FIXME/HACKcomments that signal known debt- Dead exports (exported symbols with no in-repo import)
- Obvious type-safety gaps (unchecked
any, missing null guards)
- Report, output a findings list sorted by severity (Critical → High → Medium → Low):
## Audit Report, <project name> ### Critical - [file:line] <description> ### High - ... ### Summary <total count> findings across <file count> files scanned. - Stop after reporting. Do not apply any fixes.
