Automated Code Quality & Security Audits

The git-pr-auditor is a high-performance review skill designed for developers who need to shift-left on security and code quality. It automates the tedious process of scanning diffs for vulnerabilities and anti-patterns, ensuring that every commit meets your project's standards before it ever reaches a human reviewer.

What it does

This skill performs a multi-layered analysis of git diffs—whether they are currently staged, in a specific branch, or part of an active GitHub Pull Request. It categorizes changes by file type and applies targeted audit logic to identify issues across three severity levels: Critical (Security), Warning (Quality), and Info (Best Practices).

• Security Scanning: Detects hardcoded secrets, SQL/Command injection, and XSS patterns.
• Quality Control: Flags code smells like "magic numbers," swallowed errors, and leaked debug logs.
• Structural Analysis: Identifies overly complex functions and missing documentation.
• Integration Support: Works seamlessly with standard Git workflows and the GitHub CLI.

Why use this skill?

Unlike basic LLM prompting, this skill follows a structured multi-step execution protocol. It leverages specialized audit checklists for different languages (backend, frontend, config, SQL) and produces a standardized, machine-readable report. It acts as a tireless first-pass reviewer that never misses a TODO comment or a risky shell=True call.