Execute qualquer Skill no Manus
com um clique

Execute qualquer Skill no Manus com um clique

Começar

project-audit

Estrelas511

Forks42

Atualizado13 de abril de 2026 às 00:39

Security scan, dead code detection, and code quality audit for any project

Instalação

Instalar com Codex ou Claude Copie este prompt, cole no Codex, Claude ou outro assistente e deixe que ele revise a página da skill e instale para você.

Executar no Manus

Fonte

vibeeval

vibeeval/vibecosystem

Abrir repositório GitHub Ver repositórios do creator

Download

Executar no Manus

Ocupações relacionadasSOC

Baseado na classificação ocupacional SOC

Analistas de garantia de qualidade de software e testadoresInformática e Matemática·SOC 15-1253

SKILL.md

readonly

name	project-audit
description	Security scan, dead code detection, and code quality audit for any project
version	1.0.0
category	quality
tags	["security","dead-code","audit","sast","quality"]

Project Audit

Automated security + quality scan for any codebase. Generates a report, then optionally auto-fixes safe issues.

Usage

# Scan current directory
vibeco audit

# Scan specific path
vibeco audit /path/to/project

# Auto-fix safe issues (console.log removal)
vibeco audit --fix

# JSON output for CI integration
vibeco audit --json

What It Scans

Security (SAST)

CRITICAL: eval(), exec(), execSync(), os.system(), subprocess, SQL injection patterns
HIGH: innerHTML, dangerouslySetInnerHTML, document.write(), pickle.load(), hardcoded secrets
MEDIUM: Sensitive data in console.log, MD5/SHA1 weak crypto

Code Quality

Large files (>500 lines)
TODO/FIXME/HACK/XXX count
Excessive console.log (>3 per file)

Test Coverage

Source file to test file ratio
Test file detection (.test.ts, .spec.js, etc.)

Dependencies

Lock file presence check
Node engine version check

Output

Terminal Report

Color-coded report with grade (A+ to F):

A+: Zero issues
A-: Only MEDIUM issues
B: Some MEDIUM issues
C: HIGH issues present
D: Many HIGH issues
F: CRITICAL issues present

JSON Report

Saved to .vibeco-audit.json in project root. Contains all findings for programmatic processing.

Auto-Fix (--fix)

Currently auto-fixes:

Removes console.log statements from files with >3 occurrences

Does NOT auto-fix (manual review required):

Security issues (too risky for automation)
Large file refactoring
TODO/FIXME resolution

Workflow

1. vibeco audit          -> Scan, generate report
2. Review report         -> Understand issues
3. vibeco audit --fix    -> Auto-fix safe issues
4. Manual fixes          -> Address security findings
5. vibeco audit          -> Re-scan to verify

Ignored Directories

node_modules, dist, .git, vendor, pycache, .next, build, coverage

Ignored in Security Scan

Test files (*.test.ts, *.spec.js, tests/, mocks/) are excluded from security scanning to avoid false positives.

Mais deste repositório

mesmo repositório

codex-orchestration

vibeeval/vibecosystem

OpenAI Codex CLI + Claude Code (Hizir) birlikte kullanim rehberi. Is dagitim pattern'leri, GitHub Actions workflow ornekleri, review dongusu ve iki AI yazilim asistaninin guclu yanlarini birlestiren orchestration stratejileri.

2026-06-10511

create-handoff

vibeeval/vibecosystem

Create handoff document for transferring work to another session

2026-06-10511

experiment-engine

vibeeval/vibecosystem

Otonom deney dongusu. Kod degisikligi yap, olc, karsilastir, kabul et veya geri al. Metrik bazli karar verme ile performans, boyut veya kalite optimizasyonu. Tek basina veya agent ile kullan.

2026-06-10511

plan-agent

vibeeval/vibecosystem

Planning agent that creates implementation plans and handoffs from conversation context

2026-06-10511

tdd-workflow

vibeeval/vibecosystem

Use this skill when writing new features, fixing bugs, or refactoring code. Enforces test-driven development with 80%+ coverage including unit, integration, and E2E tests.

2026-06-10511

secret-scanner

vibeeval/vibecosystem

Pre-push API key and credential scanner - blocks git push if secrets found

2026-04-13511

name	project-audit
description	Security scan, dead code detection, and code quality audit for any project
version	1.0.0
category	quality
tags	["security","dead-code","audit","sast","quality"]

Project Audit

Automated security + quality scan for any codebase. Generates a report, then optionally auto-fixes safe issues.

Usage

# Scan current directory
vibeco audit

# Scan specific path
vibeco audit /path/to/project

# Auto-fix safe issues (console.log removal)
vibeco audit --fix

# JSON output for CI integration
vibeco audit --json

What It Scans

Security (SAST)

CRITICAL: eval(), exec(), execSync(), os.system(), subprocess, SQL injection patterns
HIGH: innerHTML, dangerouslySetInnerHTML, document.write(), pickle.load(), hardcoded secrets
MEDIUM: Sensitive data in console.log, MD5/SHA1 weak crypto

Code Quality

Large files (>500 lines)
TODO/FIXME/HACK/XXX count
Excessive console.log (>3 per file)

Test Coverage

Source file to test file ratio
Test file detection (.test.ts, .spec.js, etc.)

Dependencies

Lock file presence check
Node engine version check

Output

Terminal Report

Color-coded report with grade (A+ to F):

A+: Zero issues
A-: Only MEDIUM issues
B: Some MEDIUM issues
C: HIGH issues present
D: Many HIGH issues
F: CRITICAL issues present

JSON Report

Saved to .vibeco-audit.json in project root. Contains all findings for programmatic processing.

Auto-Fix (--fix)

Currently auto-fixes:

Removes console.log statements from files with >3 occurrences

Does NOT auto-fix (manual review required):

Security issues (too risky for automation)
Large file refactoring
TODO/FIXME resolution

Workflow

1. vibeco audit          -> Scan, generate report
2. Review report         -> Understand issues
3. vibeco audit --fix    -> Auto-fix safe issues
4. Manual fixes          -> Address security findings
5. vibeco audit          -> Re-scan to verify

Ignored Directories

node_modules, dist, .git, vendor, pycache, .next, build, coverage

Ignored in Security Scan

Test files (*.test.ts, *.spec.js, tests/, mocks/) are excluded from security scanning to avoid false positives.