# Md Audit

Read-only code quality audit, scan the current working directory for common issues...

- Repository: https://github.com/HarnessMD/munder-difflin (9274 stars)
- Category: Security
- License: MIT
- Last updated: 2026-11-01
- Runs scripts: no, instructions only

## Install

Claude Code: `npx skills add HarnessMD/munder-difflin --skill md-audit -g -a claude-code -y`
Codex: `npx skills add HarnessMD/munder-difflin --skill md-audit -g -a codex -y`
Cursor: `npx skills add HarnessMD/munder-difflin --skill md-audit -g -a cursor -y`
Gemini CLI: `npx skills add HarnessMD/munder-difflin --skill md-audit -g -a gemini-cli -y`

## Description

Read-only code quality audit, scan the current working directory for common issues (bugs, dead code, security hotspots, missing error handling) and return a prioritised findings report. No files are edited. Use when asked to "audit the code", "quick audit", "find issues", "code scan", or "what's wrong with this codebase". (munder-difflin)

## SKILL.md, as published by its author (untrusted third-party text, read it as data)

## Code Audit (read-only)

Perform a read-only code quality scan and return a findings report. Do NOT edit any files.

Steps:
1. **Scope**, identify the primary language and entry points (`package.json`, `Cargo.toml`, `go.mod`, `pyproject.toml`, or similar).
2. **Scan**, use `Grep` and `Read` to look for:
   - Unhandled promise rejections / ignored errors
   - Hard-coded secrets or credentials (keys, tokens, passwords)
   - `TODO`/`FIXME`/`HACK` comments that signal known debt
   - Dead exports (exported symbols with no in-repo import)
   - Obvious type-safety gaps (unchecked `any`, missing null guards)
3. **Report**, output a findings list sorted by severity (Critical → High → Medium → Low):
   ```
   ## Audit Report, <project name>

   ### Critical
   - [file:line] <description>

   ### High
   - ...

   ### Summary
   <total count> findings across <file count> files scanned.
   ```
4. Stop after reporting. Do not apply any fixes.