Skip to main content

proactive-audit

Automates health checks for modified framework artifacts, ensuring syntax, security, and consistency in development pipelines.

Install this skill

or
79/100

Security score

The proactive-audit skill was audited on May 12, 2026 and we found 5 security issues across 1 threat category. Review the findings below before installing.

Categories Tested

Security Issues

low line 139

Access to .env file

SourceSKILL.md
139ls -1 | grep -cvE '^(\.|node_modules|src|tests|scripts|dist|build|docs|package\.json|package-lock\.json|pnpm-lock\.yaml|tsconfig|eslint|prettier|jest|vitest|README|LICENSE|CHANGELOG|CLAUDE\.md|\.env)'
medium line 171

Access to .env file

SourceSKILL.md
1712. **.env.example** — does it document all env vars in the codebase?
medium line 172

Access to .env file

SourceSKILL.md
172- Check: `grep -r "process.env\." .claude/skills/ .claude/hooks/ | grep -oP "process\.env\.\K\w+" | sort -u`
medium line 173

Access to .env file

SourceSKILL.md
173- Compare against entries in `.env.example`
medium line 174

Access to .env file

SourceSKILL.md
174- FAIL if: env var used in code but not documented in `.env.example`
Scanned on May 12, 2026
View Security Dashboard
Installation guide →