Repo Audit
Deep analysis of Git history: identify frequently changed hotspot files, analyze code...
Install
npx skills add zebbern/claude-code-guide --skill repo-audit -g -a claude-code -y- Repository
- zebbern/claude-code-guide4.7k
- Category
- Security
- Updated
- 4d ago
- License
- MIT
- Context cost
- Lightabout 724 tokens
- Runs scripts
- Yes, review before use
What it does
Deep analysis of Git history: identify frequently changed hotspot files, analyze code ownership by contributor, and scan for leaked secrets. Triggered when users ask about Git analysis, code hotspots, who owns what code, secret scanning, security audits of commit history, or optimizing code review assignments.
Repo Audit, Deep Analysis of Git History
Perform three-dimensional analysis on a Git repository: hotspot file detection, code ownership analysis, and secret leak scanning.
Feature Overview
1. Hotspot File Analysis (scripts/hotfiles.sh)
Identify the most frequently changed files in a repository to help spot:
- High-risk code areas (frequent changes = potential instability)
- Files that deserve extra attention during code review
- Modules that may need splitting or refactoring
Usage:
bash scripts/hotfiles.sh [options]
| Option | Description | Default |
|---|---|---|
--repo PATH | Repository path | Current directory |
--top N | Show top N files | 20 |
--since DATE | Start date (e.g. 2024-01-01) | None |
--until DATE | End date | None |
--author AUTHOR | Filter by author | None |
--format FORMAT | Output format: table / csv / json | table |
2. Code Ownership Analysis (scripts/ownership.sh)
Analyze actual code ownership, reporting for each contributor within the specified scope:
- Commit count and percentage
- Lines changed (additions/deletions)
- Last active date
Usage:
bash scripts/ownership.sh [options]
| Option | Description | Default |
|---|---|---|
--repo PATH | Repository path | Current directory |
--path SUBPATH | Analyze a specific subdirectory or file | Entire repo |
--top N | Show top N contributors | 10 |
--since DATE | Start date | None |
--format FORMAT | Output format: table / csv / json | table |
3. Secret Leak Scanning (scripts/secret-scan.sh)
Scan the full Git history (including deleted commits) for common secrets and sensitive information:
- AWS Access Key / Secret Key
- GitHub / GitLab / Slack Tokens
- SSH Private Keys
- Generic API Keys, passwords, and secret patterns
Usage:
bash scripts/secret-scan.sh [options]
