md-audit

Agent Skills › chaitanyagiri/munder-difflin › md-audit

md-audit

GitHub

只读代码质量审计工具，扫描当前目录以发现漏洞、死代码、安全热点及缺失的错误处理等问题。识别项目类型后，使用Grep和Read检查硬编码密钥、未处理错误等风险，并按严重程度输出报告，严禁修改任何文件。

resources/skills/md-audit/SKILL.md chaitanyagiri/munder-difflin

触发场景

audit the code quick audit find issues code scan what's wrong with this codebase

安装

npx skills add chaitanyagiri/munder-difflin --skill md-audit -g -y

更多选项

非标准路径

npx skills add https://github.com/chaitanyagiri/munder-difflin/tree/main/resources/skills/md-audit -g -y

不安装直接使用

npx skills use chaitanyagiri/munder-difflin@md-audit

指定 Agent (Claude Code)

npx skills add chaitanyagiri/munder-difflin --skill md-audit -a claude-code -g -y

安装 repo 全部 skill

npx skills add chaitanyagiri/munder-difflin --all -g -y

预览 repo 内 skill

npx skills add chaitanyagiri/munder-difflin --list

SKILL.md

Frontmatter

{
    "name": "md-audit",
    "version": "1.0.0",
    "description": "Read-only code quality audit — scan the current working directory for common\nissues (bugs, dead code, security hotspots, missing error handling) and return\na prioritised findings report. No files are edited.\nUse when asked to \"audit the code\", \"quick audit\", \"find issues\", \"code scan\",\nor \"what's wrong with this codebase\". (munder-difflin)\n",
    "allowed-tools": [
        "Read",
        "Bash",
        "Grep"
    ]
}

Code Audit (read-only)

Perform a read-only code quality scan and return a findings report. Do NOT edit any files.

Steps:

Scope — identify the primary language and entry points (package.json, Cargo.toml, go.mod, pyproject.toml, or similar).
Scan — use Grep and Read to look for:
- Unhandled promise rejections / ignored errors
- Hard-coded secrets or credentials (keys, tokens, passwords)
- TODO/FIXME/HACK comments that signal known debt
- Dead exports (exported symbols with no in-repo import)
- Obvious type-safety gaps (unchecked any, missing null guards)

Report — output a findings list sorted by severity (Critical → High → Medium → Low):

## Audit Report — <project name>

### Critical
- [file:line] <description>

### High
- ...

### Summary
<total count> findings across <file count> files scanned.