Skip to main content

codebase-audit-pre-push

Conducts a thorough pre-push audit of codebases to ensure production readiness by removing junk files, dead code, and security vulnerabilities.

Install this skill

or
65/100

Security score

The codebase-audit-pre-push skill was audited on Mar 8, 2026 and we found 3 security issues across 2 threat categories, including 1 critical. Review the findings below before installing.

Categories Tested

Security Issues

critical line 91

Direct command execution function call

SourceSKILL.md
91- Command injection: No `exec()` with user-provided input
medium line 45

Access to .env file

SourceSKILL.md
45- `.env` files (should never be committed)
medium line 53

Access to .env file

SourceSKILL.md
53Check if the `.gitignore` file exists and is thorough. If it’s missing or not complete, update it to include all junk file patterns above. Ensure that `.env.example` exists with keys but no values.
Scanned on Mar 8, 2026
View Security Dashboard
Installation guide →