Perform a full codebase review, categorize findings by severity, file GitHub issues, then fix each issue in an isolated git worktree and submit PRs.
SkillScore50Maintained
Automatic
◆Coding pack
Last verified 7/27/2026
What it changes
Passed 10 of 19 test cases with the skill, and 1 of 19 without it.
Without skill5%
With skill50%
10 fixed1 passed either way11 still failing0 broke
Pass-rate lift
+45 pp
Tokens
+56%
Agent turns
0%
Response time
-42%
Model gemini-3.6-flashMeasured 7/27/2026v111 of 22 cases passed with skill · 19 comparable
Tokens, turns and time describe resource use, not a dollar price.
What's inside
The instructions your model reads when the skill loads.
SKILL.md151 lines8 files
Codebase Audit → Issue → Worktree Fix → PR
End-to-end workflow: systematically review the entire codebase, report findings as GitHub issues, fix each issue in an isolated git worktree, and submit PRs — all in one session.
When to use this skill
Use this skill when you need to:
Perform a full code review / audit of the codebase
Proactively find security vulnerabilities, logic bugs, or code quality problems
Turn code review findings into tracked GitHub issues
Fix each issue in isolation (worktree per issue) and submit PRs
Run a periodic codebase health check with automated follow-through
API design: inconsistent validation, missing required field checks
Record every finding with: file path, line number(s), category, severity (Critical/High/Medium/Low), description, and suggested fix.
Dependency scan: Read references/dependency-audit.md and run the Dependabot alert fetch + npm audit to discover vulnerable dependencies. Record each finding using the dependency-audit format.
Analyze, standardize, validate, and sync locally maintained skills into agent skill directories with a `skills` CLI-aligned workflow. Use this skill when Codex needs to turn ad-hoc prompt or rules folders into reusable `SKILL.md`-based skills, install or sync one or more local skills from `./skills` into Claude, Cursor, CodeBuddy, Codex, or similar agent directories, or manage local skill path mappings and symlink or copy installation behavior.