repo-audit-skills

Deterministic, advisory mutation-testing audit for Python. Wraps mutmut==3.6.0 to measure per-module mutation kill rates, emitting TEST findings (shared code-health schema) for modules whose kill rate falls below the configured threshold. Never mutates source in-place; runs in a sandbox copy. The machine-readable answer to "how good are my tests at catching bugs?".

Umbrella that runs the code-health leaf skills (complexity, duplication, dead-code, structure, quality) in parallel, merges and ranks their findings into one report, and emits a supervisor decision with exit codes 0/1/2. Reads a leaf registry so new language leaves plug in without changing the orchestrator. Advisory only.

Deterministic, advisory complexity and maintainability audit for Python. Uses lizard (per-function cyclomatic complexity, length, parameters) and radon mi (per-module maintainability index) to emit SIMPLIFY / DECOMPOSE findings to the shared code-health finding schema. Never mutates source.

Deterministic, advisory testedness audit for Python. Consumes coverage.py JSON report(s) and emits TEST findings (shared code-health schema) for production files with no or insufficient test coverage. Never runs tests, never mutates source. The machine-readable answer to "is this file safe to refactor?".

Deterministic, advisory dead-code audit for Python. Uses vulture (unused functions/classes/methods/properties) and ruff F401/F811/F841 (unused imports, redefinitions, unused locals) to emit DELETE findings to the shared code-health finding schema. Never mutates source.

Deterministic, advisory dependency audit for Python. Compiles declared dependencies (pyproject.toml [project] or requirements*.txt) against AST-collected imports and reports unused declarations, undeclared imports, test-only runtime usage, and optional C-8 advisory enrichment. Uses stdlib only, requires Python >=3.11, never mutates source, and never makes network calls.

Deterministic, advisory docs-vs-reality audit for Python docs and command docs that emits LINT findings. Compares documented CLI flags against actual argparse parsers, checks doc paths for dead references, flags stale version pins, and optionally reports docstring coverage. Never mutates source.

Deterministic, advisory copy-paste clone audit for Python. Uses jscpd to detect duplicated token sequences and emits EXTRACT (cross-file) / MERGE (same-file) findings to the shared code-health finding schema. Never mutates source.

Deterministic, advisory execution audit for any repository. Detects duplicate or serial runner invocations in npm scripts, parses JUnit XML for slow tests, and checks for benchmark entrypoint absence. Language-agnostic (languages: ["*"]). Never mutates source.

Deterministic, advisory surface-growth audit between git revisions. Computes tracked-files, net-LOC, docs-LOC, dependency-declaration, and CLI-flag growth from `git diff --numstat` and reports positive deltas beyond configured allowances. Language-agnostic (languages: ["*"]). Never mutates source.

Deterministic, advisory git-history hotspot audit. Mines commit history to identify churn hotspots (DECOMPOSE), temporally coupled files (RESTRUCTURE), and knowledge concentration (RESTRUCTURE) using only stdlib and git. Never mutates source.

Deterministic, advisory algorithmic performance-smell audit for Python. Wraps perflint (via pylint) to emit PERF findings for wrong container types, redundant casts, and list/comprehension refactors (perflint's high-precision deterministic checks) to the shared code-health finding schema. The over-approximating loop-invariant heuristics are excluded. Never mutates source.

Deterministic, advisory lint/format/type audit for Python. Uses ruff lint (with dead-code and complexity codes excluded), config-gated ruff format --check, and a type checker to emit LINT / FORMAT / TYPE findings. Never mutates source.

Deterministic, advisory tracked-tree hygiene and release hygiene audit for any repository. Checks tracked artifacts, gitignore violations, oversized files, broken symlinks, conflicting tool configs, version mismatches, missing CI, and missing LICENSE. Language-agnostic (languages: ["*"]). Never mutates source.

Deterministic, advisory security audit for Python. Wraps a pinned bandit (bandit==1.9.4) static analysis run and emits SECURITY findings (shared code-health schema). Optional advisory mode ingests a pip-audit-shaped JSON report for dependency vulnerabilities. Never mutates source; never hits the network in-band. STANDALONE — not part of the code-health umbrella registry.

Deterministic, advisory import-structure audit for Python. Builds the internal import graph (stdlib ast), enumerates import cycles (Tarjan SCC), and flags god-modules by fan-in/fan-out, emitting RESTRUCTURE findings to the shared code-health finding schema. Never mutates source.

One-command test health check that orchestrates coverage collection, TDD quality scoring, and redundancy triage into a unified pipeline. Runs independent stages in parallel for ~40% faster execution. Produces a single merged report with rubric scores, triage decisions, and actionable next steps.

Score your test suite against an 8-dimension TDD rubric, produce 0-24 scores, and output quality gaps with prioritized improvement actions.

Identify redundant tests with empirical deselection, branch-equivalence, assertion dominance, and coverage/mutation signals. Produces conservative DELETE/KEEP/MERGE guidance with strict gates and confidence tiers.