repo-audit SKILL.md skillA

This file is byte-identical to the first copy the registry indexed. Same content hash, so the same checks give both the same grade.

repo-audit from opencrabs/opencrabs is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.

Install it, pinned
mdr add opencrabs/opencrabs/repo-audit@git:20260509.7374b5e

Pins git:20260509.7374b5e in mdr.lock. Pin the fingerprint instead.

Audit grade
A, 17 of 17 checks passed
Kind
SKILL.md skill
Repository
opencrabs/opencrabs
Path
src/docs/reference/templates/skills/repo-audit/SKILL.md
Versions recorded
1
Latest version
git:20260509.7374b5e, committed May 9, 2026
Size
13,395 bytes
Repository stars
1,000
License
MIT

Run a comprehensive language-agnostic repository health audit, scored 0-100. Detects language, runs native tooling, never assumes JS/Python.

Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.

What the file says

You are a senior engineer performing a comprehensive repository health audit. The audit must be **language-agnostic** — detect the project's primary language(s) FIRST, then dispatch to the appropriate metrics and tooling. Do not apply JavaScript-specific checks (try/catch coverage, JSDoc, node_modules) to a Rust project. Do not apply Rust-specific checks to a Python project. Each language has its own conventions; respect them.

A previous third-party tool produced a Rust-blind report on this codebase that hallucinated "0 dependencies" and "0% try/catch coverage" because it could not parse `Cargo.toml` or recognize `Result<T, E>` error handling. **Do not be that tool.** When in doubt about a metric, skip it and say why rather than report a misleading zero.

## Stage 1 — Language detection

Inspect the working directory for manifest files. **Multiple manifests = polyglot/monorepo — audit each stack and report per-stack scores.**

| Manifest detected | Language | Native tooling for audit |
|---|---|---|
| `Cargo.toml` | Rust | `cargo clippy`, `cargo test`, `cargo audit`, `cargo outdated`, `cargo tree` |
…

Read the whole file at its exact version.

How to install

The exact contents, by fingerprint
mdr add opencrabs/opencrabs/repo-audit@sha256:27dca355f1e7441b

The line at the top of this page pins the label git:20260509.7374b5e, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.

Badge

mdr badge

[![mdr](https://markdownregistry.com/badge/art_lrd7g3umbkse6g3a.svg)](https://markdownregistry.com/a/art_lrd7g3umbkse6g3a)

3 badge image fetches in 30 days. What the badge shows.

Versions

The registry has recorded 1 version of this file, committed on May 9, 2026.

versioncommittedcommitsizeaudit
git:20260509.7374b5e latest2026-05-09 7374b5e 13,395 BA view

Audit of the latest version

A  17 of 17 checks passed. Fixed automatic checks with no AI involved, so the same checks give the same answer every run.
  • pass: Frontmatter block present
  • pass: Frontmatter declares a name
  • pass: Frontmatter declares a description
  • pass: Size between 200 bytes and 200 KB (13395 bytes)
  • pass: No zero-width or bidi control characters
  • pass: No instruction hidden inside an HTML comment
  • pass: No link to an exfiltration or paste host
  • pass: No credential-shaped string
  • pass: No instruction to send local credentials anywhere
  • pass: No text hidden with inline styles
  • pass: No prompt-injection phrasing
  • pass: No curl or wget piped into a shell
  • pass: No recursive delete of root, home or parent
  • pass: No instruction to read or print local credentials
  • pass: No base64 blob over 200 characters
  • pass: No link to a raw IP address
  • pass: No script tag

Source

GitHub

opencrabs/opencrabs · 1,000 stars · license MIT · pushed 2026-10-20 · branch main

API

GET https://markdownregistry.com/api/v1/artifacts/art_lrd7g3umbkse6g3a
GET https://markdownregistry.com/api/v1/resolve?ref=opencrabs/opencrabs/repo-audit
GET https://markdownregistry.com/api/v1/blob/27dca355f1e7441b3949843b330c57d11abce1444c9568a48832f0605f5a56dd

Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.

Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.

More from opencrabs/opencrabs

AGENTS.md@src/docs/reference/templates AGENTS.md file
opencrabs/opencrabs · src/docs/reference/templates/AGENTS.md
git:20260920.206c489 · audit A · 1,000 stars
rebuild SKILL.md skill
opencrabs/opencrabs · src/docs/reference/templates/maintainer-skills/rebuild/SKILL.md · Rebuild OpenCrabs from source and hot-swap the running binary in place. Maintainer-only template (source checkout…
git:20261006.9f53c54 · audit A · 1,000 stars
motion-graphics SKILL.md skill
opencrabs/opencrabs · src/docs/reference/templates/optional-skills/motion-graphics/SKILL.md · Build videos and motion graphics with Remotion: narrated step-by-step tutorials for an app (install, setup, channel…
git:20261016.94b9f85 · audit A · 1,000 stars
a2a-gateway SKILL.md skill
opencrabs/opencrabs · src/docs/reference/templates/skills/a2a-gateway/SKILL.md · Agent-to-Agent (A2A) protocol gateway reference. JSON-RPC 2.0 peer-to-peer agent communication. (/a2a-gateway, a2a…
git:20260503.68c0c2a · audit B · 1,000 stars
browser-cdp SKILL.md skill
opencrabs/opencrabs · src/docs/reference/templates/skills/browser-cdp/SKILL.md · Native CDP browser automation reference. Headless/headed Chrome control, screenshots, JS evaluation. (/browser-cdp…
git:20260916.5d77e6c · audit A · 1,000 stars
cost-estimate SKILL.md skill
opencrabs/opencrabs · src/docs/reference/templates/skills/cost-estimate/SKILL.md · Estimate codebase cost-to-build, AI-assisted ROI, and fair-market valuation
git:20260501.09a3f3d · audit A · 1,000 stars
dynamic-tools SKILL.md skill
opencrabs/opencrabs · src/docs/reference/templates/skills/dynamic-tools/SKILL.md · Runtime tool management with tool_manage and tools.toml format. Create, enable, disable, reload tools without restart…
git:20260613.0bb4b03 · audit A · 1,000 stars
github SKILL.md skill
opencrabs/opencrabs · src/docs/reference/templates/skills/github/SKILL.md · Full GitHub CLI control — issues, PRs, code reviews, repo management. Uses gh CLI with auth detection, rate limiting…
git:20260721.3692cf8 · audit A · 1,000 stars
multi-agent SKILL.md skill
opencrabs/opencrabs · src/docs/reference/templates/skills/multi-agent/SKILL.md · Orchestrate a task across multiple AI models/providers. Define a team of agents with different roles, providers, and…
git:20260618.3ad5c24 · audit A · 1,000 stars
security-audit SKILL.md skill
opencrabs/opencrabs · src/docs/reference/templates/skills/security-audit/SKILL.md · Run a comprehensive language-agnostic security & CVE audit, scored 0-100
git:20260501.09a3f3d · audit A · 1,000 stars

Every file in opencrabs/opencrabs

Other files named repo-audit

repo-audit SKILL.md skill
zebbern/claude-code-guide · skills/repo-audit/SKILL.md · Deep analysis of Git history: identify frequently changed hotspot files, analyze code ownership by contributor, and…
git:20260531.164971d · audit A · 4,678 stars
repo-audit SKILL.md skill
adolfousier/opencrabs · src/docs/reference/templates/skills/repo-audit/SKILL.md · Run a comprehensive language-agnostic repository health audit, scored 0-100. Detects language, runs native tooling…
git:20260509.7374b5e · audit A · 1,004 stars
repo-audit SKILL.md skill
kanevry/session-orchestrator · skills/repo-audit/SKILL.md · Use this skill when the user wants to audit a repository for baseline compliance, check code quality, security posture…
git:20260815.957b21b · audit F · 53 stars
repo-audit SKILL.md skill
kanevry/session-orchestrator · .agents/skills/repo-audit/SKILL.md · Use this skill when the user wants to audit a repository for baseline compliance, check code quality, security posture…
git:20260919.176b605 · audit A · 53 stars
repo-audit SKILL.md skill
kanevry/session-orchestrator · .codex-plugin/skills/repo-audit/SKILL.md · Use this skill when the user wants to audit a repository for baseline compliance, check code quality, security posture…
git:20260916.3ebf0e9 · audit A · 53 stars
repo-audit SKILL.md skill
kanevry/session-orchestrator · .cursor/skills/repo-audit/SKILL.md · Use this skill when the user wants to audit a repository for baseline compliance, check code quality, security posture…
git:20260916.3ebf0e9 · audit A · 53 stars
repo-audit SKILL.md skill
iuliandita/skills · skills/repo-audit/SKILL.md · Audit repositories or PRs for bugs, security, code quality, and docs: quick review or exhaustive domain coverage.
git:20261003.496420b · audit A · 8 stars
repo-audit SKILL.md skill
idaibin/skills · skills/repo-audit/SKILL.md · Audit existing frontend, Java, or Rust surfaces read-only. Use repo-review for change-based reviews.
git:20260917.5cfe6d9 · audit A · 6 stars

Browse by kind, by grade A, or by owner.