code reviewby mhattingpete
Code Auditor
mhattingpete/code-auditor
Performs comprehensive codebase analysis covering architecture, code quality, security, performance, testing, and maintainability.
What it changes
Passed 10 of 17 test cases with the skill, and 12 of 17 without it.
Without skill68%
With skill59%
Checks it passed that the model alone missed
- The process executes linters using shell commands.
- The finding includes an estimated effort for the fix.
2 fixed11 passed either way5 still failing4 broke
- Pass-rate lift
- -9 pp
- Tokens
- -15%
- Agent turns
- 0%
- Response time
- -40%
Model gemini-3.6-flashMeasured 8/18/2026v113 of 22 cases passed with skill · 17 comparable
See it in action
One of 2 test cases the skill fixed. Same model, same prompt, with and without the skill.
PromptWhen documenting a specific security flaw found in `src/auth/jwt.ts` line 42, what key details must be provided inside that finding entry?
What was checked, without and with the skill| Checked | Without skill | With skill |
|---|
| The finding includes a file and line reference. | Passed | Passed |
|---|
| The finding includes an estimated effort for the fix. | Missed | Passed |
|---|
What's inside
The instructions your model reads when the skill loads.
SKILL.md137 linessingle file
Code Auditor
Comprehensive codebase analysis covering architecture, code quality, security, performance, testing, and maintainability.
When to Use
- "audit the code"
- "analyze code quality"
- "check for issues"
- "review the codebase"
- "find technical debt"
- "security audit"
- "performance review"
What It Analyzes
1. Architecture & Design
- Overall structure and organization
- Design patterns in use
- Module boundaries and separation of concerns
- Dependency management
- Architectural decisions and trade-offs
2. Code Quality
- Complexity hotspots (cyclomatic complexity)
- Code duplication (DRY violations)
- Naming conventions and consistency
- Documentation coverage
- Code smells and anti-patterns
3. Security
- Common vulnerabilities (OWASP Top 10)
- Input validation and sanitization
- Authentication and authorization
- Secrets management
- Dependency vulnerabilities
4. Performance
- Algorithmic complexity issues
- Database query optimization
Track record
Benchmark
10 / 17
test cases passed, vs 12 / 17 without
Adoption
- Users
- 0
- Times used
- 0
Safety and source details
SkillSafety
✓ 3 of 3 passed✓Code scan15 of 15 checks clean
0 critical · 0 warning · 0 info — scanner v4 — 8/3/2026
View 15 scanner checks
live_secretremote_code_executionreverse_shelldata_exfiltrationssrf_metadataagent_snoopinganti_refusaldestructive_commandsobfuscated_unicodeunicode_homoglyphopaque_blobsuspicious_urltool_overreachtrigger_abuseprompt_injection_phrasing
✓IntentSafe
LLM judge · does the skill do what it claims
✓ContentClean
LLM judge · policy & harmful-content review
Source
Importedmhattingpete / claude-skills-marketplace
productivity-skills-plugin/skills/code-auditor/SKILL.md
License Apache-2.0Imported 8/3/2026Version v1