Audit End Sprint — Security skill for Claude Code
End-of-sprint code audit — run 9-dimension sweep (security, quality, tests, dead code, TODO/FIXME, perf, docs, deps, git hygiene) and post each finding as GitHub issue.
How to install Audit End Sprint
Installs to ~/.claude/skills/fqih-.mycc-setup-audit-end-sprint/SKILL.md
mkdir -p ~/.claude/skills/fqih-.mycc-setup-audit-end-sprint && curl -fsSL https://raw.githubusercontent.com/Fqih/.mycc-setup/HEAD/commands/audit-end-sprint.md -o ~/.claude/skills/fqih-.mycc-setup-audit-end-sprint/SKILL.md Restart Claude Code, or start a new session, for it to be picked up.
What Audit End Sprint does
End-of-sprint code audit — run 9-dimension sweep (security, quality, tests, dead code, TODO/FIXME, perf, docs, deps, git hygiene) and post each finding as GitHub issue.
Alternatives in Security
- Reflexion — Audit and optimize the .claude/ ecosystem — skills, hooks, guides, patterns, agents, and settings — for qualit 224 ★
- Vuln Scan — Multi-agent security vulnerability sweep — fans out region-scoped hunters, verifies findings, and reports 107 ★
- API Contract Review — API platform contract review 83 ★
Full documentation available on GitHub
View Source RepositoryRelated Skills
Review Code Security
Tiered application security audit (T1 pre-commit, T2 feature complete, T3 sprint end) covering OWASP, secrets,
Wormhook Setup
Interactively set up wormhook's out-of-Claude scanning (CLI, git-pull audit, hourly sweep, scan roots)
Find Wasted Code
Run the find-wasted-code audit — the code-per-friction sibling of /token-waste-audit and /find-wasted-effort.
Zorille
Four Claude Code skills for codebase hygiene: codebase-audit (find issues) + plan-fixes (turn issues into PR-s
Audit Crds
Audit CRDs and controllers for inconsistencies, dead fields, and unimplemented features — then file GitHub iss
Audit Chart
Audit the Helm chart for sync with operator code — values keys, CLI flags, CRD versions, template correctness,
Related Agents
Tech Debt Detector
Detecta deuda técnica en Booster AI — any, @ts-ignore, TODO/FIXME sin issue, localhost en código productivo, m
Pipeline Clerk
Caretake the delivery pipeline: sweep its open pull requests for dead fires and repair them, straighten a stuc
Comment Accuracy
Detects stale comments, docstring-signature mismatches, and contradicted NOTE/TODO/FIXME markers