md-audit
Read-only code quality audit — scan the current working directory for common issues (bugs, dead code, security hotspots, missing error handling) and return a prioritised findings report. No files are edited. Use when asked to "audit the code", "quick audit", "find issues", "code scan", or "what's wrong with this codebase". (munder-difflin)
来源信息
- 仓库
- HarnessMD/munder-difflin
- 最近来源活动
- 2026年6月15日 20:57
- 检测到的 SKILL.md 语言
- 英语
- 星标
- 9,167
- Forks
- 1,281
安装方式
默认使用会先检查来源的 Prompt；你也可以切换为直接命令，或下载本地副本。
检查来源文件
决定是否安装前，请先阅读 SKILL.md，以及 SkillsMP 当前展示的配套文件。
正在显示 SKILL.md
SKILL.md
来源说明 · 只读预览- name
- md-audit
- version
- 1.0.0
- description
- Read-only code quality audit — scan the current working directory for common issues (bugs, dead code, security hotspots, missing error handling) and return a prioritised findings report. No files are edited. Use when asked to "audit the code", "quick audit", "find issues", "code scan", or "what's wrong with this codebase". (munder-difflin)
- allowed-tools
- ["Read","Bash","Grep"]
## Code Audit (read-only)
Perform a read-only code quality scan and return a findings report. Do NOT edit any files.
Steps:
1. **Scope** — identify the primary language and entry points (`package.json`, `Cargo.toml`, `go.mod`, `pyproject.toml`, or similar).
2. **Scan** — use `Grep` and `Read` to look for:
- Unhandled promise rejections / ignored errors
- Hard-coded secrets or credentials (keys, tokens, passwords)
- `TODO`/`FIXME`/`HACK` comments that signal known debt
- Dead exports (exported symbols with no in-repo import)
- Obvious type-safety gaps (unchecked `any`, missing null guards)
3. **Report** — output a findings list sorted by severity (Critical → High → Medium → Low):
```
## Audit Report — <project name>
### Critical
- [file:line] <description>
### High
- ...
### Summary
<total count> findings across <file count> files scanned.
```
4. Stop after reporting. Do not apply any fixes.
在 GitHub 查看