CtrlK
BlogDocsLog inGet started
Tessl Logo

codebase-audit-pre-push

Deep audit before GitHub push: removes junk files, dead code, security holes, and optimization issues. Checks every file line-by-line for production readiness.

46

Quality

48%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Passed

No findings from the security scan

Fix and improve this skill with Tessl

tessl review fix ./skills/codebase-audit-pre-push/SKILL.md
SKILL.md
Quality
Evals
Security

Quality

Content

38%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

This skill covers a comprehensive pre-push audit checklist but suffers from significant verbosity—much of the content explains concepts Claude already knows well (separation of concerns, N+1 queries, code splitting, bcrypt). The workflow is logically sequenced but lacks proper validation checkpoints for what is essentially a destructive batch operation. The monolithic structure would benefit greatly from splitting detailed checklists into separate bundle files.

Suggestions

Cut explanatory content Claude already knows (e.g., what N+1 queries are, what bcrypt does, what separation of concerns means) and reduce each checklist to just the actionable check items—this could easily be 50-60% shorter.

Add explicit validation checkpoints after each major audit phase (e.g., 'After removing junk files, verify the app still builds before proceeding to code changes'), with a feedback loop for recovery if something breaks.

Split detailed checklists (security, scalability, architecture, performance) into separate bundle files referenced from the main SKILL.md, keeping only the high-level steps inline.

Add concrete executable examples: a grep/ripgrep command to search for secrets, a command to find unused imports, or a script snippet showing how to systematically audit files—rather than just listing what to look for.

DimensionReasoningScore

Conciseness

The skill is significantly verbose at ~200+ lines, with many items Claude already knows (what N+1 queries are, what code splitting is, what bcrypt is for, etc.). Lists like 'vague names: data, info, temp, thing' and explanations of separation of concerns are things Claude inherently understands. Much of this reads like a tutorial rather than a concise skill reference.

2 / 5

Actionability

The skill provides concrete checklists and file patterns to look for, which is somewhat actionable. However, it lacks executable code examples—no actual commands beyond mentioning 'npm audit', no scripts to run, no concrete code snippets showing how to fix issues. The guidance is specific in what to look for but vague in how to systematically execute the audit (e.g., how to search for secrets, how to detect unused imports programmatically).

3 / 5

Workflow Clarity

The 10-step sequence is clearly numbered and logically ordered, ending with a final verification step. However, for a destructive/batch operation skill (deleting files, removing code, refactoring), the validation checkpoints are weak—step 10 says 'run the app' but doesn't specify explicit validation after each major change category. There's no feedback loop for error recovery if changes break things mid-audit. Per rubric rules, missing validation in destructive/batch operations caps this at 3.

3 / 5

Progressive Disclosure

The entire skill is a monolithic ~200-line document with no bundle files to offload detailed checklists. The security checklist, scalability checklist, architecture checklist, and performance checklist could each be separate reference files. References to related skills at the bottom are nice but the core content badly needs splitting. The output format template is inlined when it could be a separate reference.

2 / 5

Total

10

/

20

Passed

Description

58%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description communicates a clear purpose (pre-push code audit) with several concrete actions, but lacks an explicit 'Use when...' clause that would help Claude know exactly when to select it. The trigger terms are somewhat technical and may not match how users naturally request this kind of help.

Suggestions

Add an explicit 'Use when...' clause with natural trigger phrases like 'before pushing to GitHub', 'pre-push review', 'code cleanup before deploy', 'check code before merging'.

Include more natural synonyms users might say: 'code review', 'cleanup', 'pre-deploy check', 'repository hygiene'.

DimensionReasoningScore

Specificity

Lists several specific actions: removes junk files, dead code, security holes, and optimization issues; checks every file line-by-line. However, it could be more comprehensive about what specific checks are performed (e.g., what counts as 'junk files', what security checks).

4 / 5

Completeness

Has a clear 'what' (removes junk files, dead code, security holes, optimization issues; checks line-by-line), but the 'when' is only weakly implied ('before GitHub push'). There's no explicit 'Use when...' clause with trigger phrases.

3 / 5

Trigger Term Quality

Includes some relevant keywords like 'GitHub push', 'dead code', 'security holes', 'audit', and 'production readiness', but misses natural user phrases like 'code review', 'pre-push check', 'cleanup', 'lint', or 'deploy ready'. Users might not naturally say 'deep audit'.

3 / 5

Distinctiveness Conflict Risk

The combination of 'before GitHub push' and the specific audit focus (junk files, dead code, security, optimization) creates a fairly distinct niche. Minor overlap risk with general code review or security scanning skills.

4 / 5

Total

14

/

20

Passed

Validation

90%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation10 / 11 Passed

Validation for skill structure

CriteriaDescriptionResult

frontmatter_unknown_keys

Unknown frontmatter key(s) found; consider removing or moving to metadata

Warning

Total

10

/

11

Passed

Repository
administrakt0r/AI-Agents-Safe-Coding-Skills
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.