Code Auditor
This is a systematic code review tool that walks through your codebase looking at six areas: architecture, code quality, security, performance, testing, and maintainability. It uses the Explore agent to map out your code, then digs into specific files to find issues like complexity hotspots, security vulnerabilities, and technical debt. You get a prioritized report with file and line references, severity ratings, and time estimates for fixes. The thoroughness is adjustable from a quick 15 minute scan to a deep multi-hour audit. Honestly most useful when you inherit a codebase or need ammunition for refactoring discussions, since it systematically documents what everyone already suspects is wrong.
- skills.sh installs
- 341
- GitHub stars
- 693
- last updated
- Aug 21, 2026
Install
$ npx -y skills add mhattingpete/claude-skills-marketplace --skill code-auditor --agent claude-codeInstalls into .claude/skills of the current project.
Files
Code Auditor
Comprehensive codebase analysis covering architecture, code quality, security, performance, testing, and maintainability.
When to Use
- "audit the code"
- "analyze code quality"
- "check for issues"
- "review the codebase"
- "find technical debt"
- "security audit"
- "performance review"
What It Analyzes
1. Architecture & Design
- Overall structure and organization
- Design patterns in use
- Module boundaries and separation of concerns
- Dependency management
- Architectural decisions and trade-offs
2. Code Quality
- Complexity hotspots (cyclomatic complexity)
- Code duplication (DRY violations)
- Naming conventions and consistency
- Documentation coverage
- Code smells and anti-patterns
3. Security
- Common vulnerabilities (OWASP Top 10)
- Input validation and sanitization
- Authentication and authorization
- Secrets management
- Dependency vulnerabilities
4. Performance
- Algorithmic complexity issues
- Database query optimization
- Memory usage patterns
- Caching opportunities
- Resource leaks
Sponsors
Agent CaffeineSponsoredClose your lid, come back to finished work
SnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthly
WaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthly
knobsSponsoredSee your site on any phone, any day, in any languageDetails
- Repository
- github.com/mhattingpete/claude-skills-marketplace
- Categories
- Testing & QA, Security, Code Review & Quality, Debugging
- License
- Apache-2.0
- First seen
- Jun 3, 2026
More from mhattingpete/claude-skills-marketplace
All 18- Timeline Creator335
- Dashboard Creator332
- Code Refactor301
- Feature Planning295
- Code Execution293
- Review Implementing256
- Conversation Analyzer248
- Technical Doc Creator221
- Ensemble Solving218
- Project Bootstrapper211
- Code Transfer173
- Flowchart Creator749
- Codebase Documenter594
- Architecture Diagram Creator500
- File Operations417
- Git Pushing411
- Test Fixing386
Recommended
More Testing & QA
npm-packagejwynia/agent-skillsBuild and publish npm packages using Bun as the primary toolchain with npm-compatible output. Use when the user wants to create a new npm library, set up a Type334skills.sh installs
cloudflare-vectorizejezweb/claude-skillsBuild semantic search with Cloudflare Vectorize V2. Covers async mutations, 5M vectors/index, 31ms latency, returnMetadata enum changes, and V1 deprecation. Pre326skills.sh installs
checklycheckly/checkly-cliSet up, create, test and manage monitoring checks using the Checkly CLI. Use when working with API Checks, Browser Checks, URL Monitors, ICMP Monitors, Playwrig321skills.sh installs
devtu-self-evolvemims-harvard/tooluniverseOrchestrate the full ToolUniverse self-improvement cycle: discover APIs, create tools, test with researcher personas, fix issues, optimize skills, and push via 310skills.sh installsnpx-clijwynia/agent-skillsBuild and publish npx-executable CLI tools using Bun as the primary toolchain with npm-compatible output. Use when the user wants to create a new CLI tool, set 307skills.sh installs
launchmicrosoft/vscodeLaunch Code OSS (VS Code from sources) into an isolated throwaway profile with unique debug ports so you can drive it with @playwright/cli AND attach a Node deb304skills.sh installs