← All skills
code-quality-audit
62 / 100 · Review before installing
Check before installing. Some of what it can do is expected: a coding skill usually runs build and test commands.
By camoa/claude-skills (GitHub) · coding · 32 stars · scanned at commit bdf188b
Use when checking code quality, running security audits, testing coverage, finding SOLID/DRY violations, or setting up quality tools. Use when user says "audit this code", "check security", "run PHPStan", "code quality", "find violations", "SOLID check", "DRY check", "test coverage", "lint this", "security review", "is this production ready", "check for vulnerabilities", "code review", "grade this code", "watch mode lint", "deep review", "ultrareview", "schedule quality sweep". Supports Drupal …
Works with any agent that supports SKILL.md skills.
What this skill can do
Runs commands on your computer
The author does not mention this. It runs automatically when the plugin is installed. Expected for a coding skill.
Found in 7 places.
Show 4 more
Downloads and installs other software
The author does not mention this.
Found in 65 places.
Show 17 more
- code-quality-tools/skills/code-quality-audit/references/operations/dast-tools.md, line 205
go install -v github.com/projectdiscovery/nuclei/v3/cmd/nuclei@latest - code-quality-tools/skills/code-quality-audit/references/operations/drupal-security.md, line 75
- **Installation:** `ddev exec pip3 install semgrep` - code-quality-tools/skills/code-quality-audit/references/operations/drupal-security.md, line 156
ddev exec pip3 install semgrep - code-quality-tools/skills/code-quality-audit/references/operations/drupal-security.md, line 157
curl -sfL https://raw.githubusercontent.com/aquasecurity/trivy/main/contrib/install.sh | sh -s -- -b /usr/local/bin - code-quality-tools/skills/code-quality-audit/references/operations/drupal-security.md, line 158
curl -sfL https://raw.githubusercontent.com/gitleaks/gitleaks/master/scripts/install.sh | sh -s -- -b /usr/local/bin - code-quality-tools/skills/code-quality-audit/references/operations/nextjs-audits.md, line 45
npx eslint . --format json > "$REPORT_DIR/lint-report.json" - code-quality-tools/skills/code-quality-audit/references/operations/nextjs-audits.md, line 50
npx tsc --noEmit - code-quality-tools/skills/code-quality-audit/references/operations/nextjs-audits.md, line 68
npx jest --coverage --coverageReporters=json-summary - code-quality-tools/skills/code-quality-audit/references/operations/nextjs-audits.md, line 91
npx jscpd src --reporters json --output "$REPORT_DIR/dry/" - code-quality-tools/skills/code-quality-audit/references/operations/nextjs-audits.md, line 118
npx madge --circular src - code-quality-tools/skills/code-quality-audit/references/operations/nextjs-security.md, line 106
- **Command:** `npx socket-npm audit` - code-quality-tools/skills/code-quality-audit/references/operations/nextjs-security.md, line 129
pip3 install semgrep - code-quality-tools/skills/code-quality-audit/references/operations/nextjs-security.md, line 132
curl -sfL https://raw.githubusercontent.com/aquasecurity/trivy/main/contrib/install.sh | sh -s -- -b /usr/local/bin - code-quality-tools/skills/code-quality-audit/references/operations/nextjs-security.md, line 135
curl -sfL https://raw.githubusercontent.com/gitleaks/gitleaks/master/scripts/install.sh | sh -s -- -b /usr/local/bin - code-quality-tools/skills/code-quality-audit/references/operations/nextjs-setup.md, line 50
pip3 install semgrep - code-quality-tools/skills/code-quality-audit/references/operations/nextjs-setup.md, line 53
curl -sfL https://raw.githubusercontent.com/aquasecurity/trivy/main/contrib/install.sh | sh -s -- -b /usr/local/bin - code-quality-tools/skills/code-quality-audit/references/operations/nextjs-setup.md, line 56
curl -sfL https://raw.githubusercontent.com/gitleaks/gitleaks/master/scripts/install.sh | sh -s -- -b /usr/local/bin
and 45 more places
Can call paid AI services billed to you
The author does not mention this.
Found in 1 place.
Sends data to these websites: github.com, raw.githubusercontent.com
This is disclosed by the author in the skill's SKILL.md or README.
Found in 12 places.
Show 9 more
Changes files outside its own folder
This is disclosed by the author in the skill's SKILL.md or README.
Found in 9 places.
Show 6 more
Safer alternatives
Low-risk skills in the same category (coding) that look related. Check that one does what you need.
Install
Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.
if [ -e ~/.agents/skills/'code-quality-audit' ] || [ -L ~/.agents/skills/'code-quality-audit' ]; then echo 'A skill folder named code-quality-audit already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/camoa/claude-skills' "$d" && git -C "$d" checkout --quiet 'bdf188b957cb5360675dbeacf47133ed89fac64d' -- 'code-quality-tools/skills/code-quality-audit' && mkdir -p ~/.agents/skills && cp -R "$d"/'code-quality-tools/skills/code-quality-audit' ~/.agents/skills/'code-quality-audit' && rm -rf "$d"; fi
Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'code-quality-audit' ~/.claude/skills/'code-quality-audit' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.
Badge for your README
The badge for camoa/claude-skills shows the score of its lowest-scoring skill.

[](https://zalavijaysinh.github.io/skilltrust/repos/camoa/claude-skills/)
Score history
| Date | Version | Score |
|---|
| 2026-11-13 | bdf188b | 62 |
| 2026-11-09 | d016bc2 | 62 |
| 2026-11-07 | 3ac874a | 62 |