hygiene-audit — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited hygiene-audit (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Run a full codebase hygiene audit. This skill coordinates a team of agents to analyze the codebase from multiple angles and produce an actionable refactoring plan.
Create a team using TeamCreate with a team lead and the following agents. All recon agents run in parallel.
Team name: hygiene-audit Team lead task: Coordinate recon agents, collect reports, synthesize findings, present recommendations.
Name: structure-recon Task: Analyze the codebase structure, file sizes, and module organization.
__init__.py exports vs star importsOutput format:
## Structure & Size Report
### File Size Distribution
- Files > 500 lines: [list with line counts]
- Files > 300 lines: [list with line counts]
- Files > 200 lines: [list with line counts]
### God Files (5+ classes or 10+ functions)
[list with counts]
### Module Organization Issues
[list of violations]
### Orphaned Files (no matching test or source)
[list]
### Directory Tree Summary
[tree with file counts]Name: dependency-recon Task: Analyze import graphs, coupling between modules, and dependency health.
Expected layering (customize for your project -- lower layers should NOT import from higher layers):
core (lowest) -> plugins -> api/cli (highest)
-> db (sideways, used by all)Output format:
## Dependency & Coupling Report
### Import Graph Summary
- Total internal imports: N
- Cross-package imports: N
### Layering Violations
[list with file:line references]
### High Fan-In Modules (imported by 5+ files)
[list with importer counts]
### High Fan-Out Modules (imports 5+ internal modules)
[list with import counts]
### Circular Dependencies
[list or "None found"]
### Unused/Missing Dependencies
[list or "All clean"]
### Tightly Coupled Pairs
[list of module pairs that are always co-imported]Name: inconsistency-recon Task: Find code inconsistencies, duplicated logic, and convention violations.
except: or overly broad except Exception: catchesOutput format:
## Inconsistency & Duplication Report
### Duplicated Logic
[list with file pairs and description]
### Convention Violations
- Datetime: [issues]
- Error handling: [issues]
- Naming: [issues]
- Sync I/O in async: [issues]
- Logging: [issues]
### Bare/Broad Exception Catches
[list with file:line]
### Raw Dicts Instead of Models
[list with file:line]
### Hardcoded Values
[list with suggested config extraction]
### TODO/FIXME/HACK Comments
[categorized list with file:line]These agents run in parallel with each other, but AFTER Phase 1 completes (they need the recon findings as context).
Name: splitting-research Task: Research best practices for splitting the specific types of large files found in Phase 1.
Output format:
## Splitting Patterns Research
### Best Practices Found
[summary of research with source links]
### Recommended Splits
For each large file from Phase 1:
- File: [path]
- Current size: [lines]
- Recommended split: [description]
- New file structure: [list of new files]
- Migration risk: low/medium/highName: optimization-research Task: Research optimization patterns specific to projects of this type.
Output format:
## Project Optimization Research
### Architecture Patterns
[relevant patterns with applicability assessment]
### Common Pitfalls at This Stage
[list of anti-patterns to watch for]
### Recommended Optimizations
[prioritized list with effort/impact ratings]
### Testing Improvements
[specific to the project's domain and testing framework]The team lead collects all 5 reports and produces the final audit document.
# Codebase Hygiene Audit
**Date**: [current date]
**Scope**: [all or focus-area from $ARGUMENTS]
## Executive Summary
[2-3 sentence overview of codebase health with a letter grade A-F]
## Critical Issues (Fix Now)
[Issues that block scaling or cause bugs -- from all recon reports]
## High Priority (Fix This Sprint)
[Issues that slow development or create tech debt]
## Medium Priority (Fix This Month)
[Issues that are annoying but not blocking]
## Low Priority (Backlog)
[Nice-to-haves and minor inconsistencies]
## Refactoring Plan
### Phase A: Quick Wins (< 1 hour each)
[Small fixes that improve quality immediately]
- [ ] Fix 1: [description] -- [file path]
- [ ] Fix 2: [description] -- [file path]
### Phase B: Module Splits (1-3 hours each)
[Large file splits with specific plans]
- [ ] Split 1: [file] into [new files] -- [strategy]
- [ ] Split 2: [file] into [new files] -- [strategy]
### Phase C: Architecture Improvements (half-day each)
[Structural changes to layering, dependency management, etc.]
- [ ] Improvement 1: [description]
- [ ] Improvement 2: [description]
### Phase D: Convention Alignment (ongoing)
[Gradual fixes to inconsistencies, can be done opportunistically]
- [ ] Convention 1: [description]
- [ ] Convention 2: [description]
## Metrics to Track
- Total lines of code: [N]
- Largest file: [path] ([N] lines)
- Average file size: [N] lines
- Test coverage estimate: [N]%
- Convention violation count: [N]If the user wants to proceed with fixes after reviewing the audit, spawn implementation teams per phase. Each implementation team gets:
For each phase (A, B, C, D), when the user approves:
refactor/hygiene-phase-X-[description]isolation: "worktree" to avoid conflictsIf $ARGUMENTS specifies a focus area, limit the audit scope:
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.