Setup & Installation
Or with the ClawHub CLI, for registry-managed skill folders outside a full OpenClaw workspace:
What This Skill Does
Audits a repository across five weighted categories: security, code quality, documentation, CI/CD readiness, and code hygiene. Produces a letter grade (A-F) with a scored breakdown and prioritized action items. Critical security findings, such as hardcoded secrets, automatically cap the grade at D or below regardless of other scores.
Covers security, quality, docs, and CI/CD in one graded report with hard grade caps for critical findings, replacing the need to run and interpret multiple separate audit tools.
When to use it
- Checking a client repo for exposed secrets before handoff
- Grading a side project before submitting to a marketplace
- Running a pre-release health check on an internal API
- Auditing an open-source project before joining as a contributor
- Identifying missing documentation before open-sourcing a private codebase
Example Workflow
Here's how your AI assistant might use this skill in practice.
User asks: Audit my Node.js API at /projects/my-api for production readiness
- 1Detect project type from package.json, directory structure, and framework dependencies
- 2Scan all tracked files for hardcoded secrets, API keys, and connection strings with embedded passwords
- 3Check .gitignore coverage, dependency lock files, and security middleware configuration
- 4Evaluate tests, linting setup, TypeScript strictness, README completeness, LICENSE, and CI/CD pipelines
- 5Calculate weighted scores across all five categories and assign a letter grade with a prioritized fix list
Project Health Report: Grade B (78/100) — security 90/100, quality 70/100, documentation 65/100, CI/CD 80/100, hygiene 85/100 — with 2 high-priority and 4 medium-priority action items