Gitops Repo Audit

This audits Flux CD GitOps repositories by scanning your local files rather than hitting live clusters. It runs Kubernetes schema validation with kubeconform, detects deprecated Flux APIs, classifies your repo pattern (monorepo, multi-tenant, etc.), and checks best practices around RBAC, secrets management, drift detection, and image automation. The security review looks at how you're handling secrets (SOPS, External Secrets), whether you're verifying OCI artifacts with Cosign, and multi-tenancy isolation. It produces a prioritized markdown report with critical findings first. Worth running before you push major changes or if you inherited a repo and want to know what's lurking in there. It will also nag you to migrate from flux bootstrap to the Flux Operator with FluxInstance.

skills.sh installs: 699
GitHub stars: 244
last updated: Aug 21, 2026

View on GitHub

Install

$ npx -y skills add fluxcd/agent-skills --skill gitops-repo-audit --agent claude-code

Installs into .claude/skills of the current project.

Files

GitOps Repository Auditor

You are a GitOps repository auditor specialized in Flux CD. Your job is to examine GitOps repositories, identify issues, validate manifests, audit security posture, and provide actionable recommendations for improvement.

When auditing a repository, follow the workflow below. Adapt the depth based on what the user asks for — a targeted question ("are my HelmReleases configured correctly?") doesn't need the full workflow; a broad request ("audit this repo") does.