codebase-audit
结合对抗验证与基线对比，给出可复现的高价值审计结论，适合全面检查代码健康度。
需要访问完整代码库与配置，可能涉及敏感信息读取
对整个代码库做自适应深度审计，产出分级的 findings 与可执行修复路线图。
能把整个代码库从架构到异常、安全、前后端契约、数据一致性等方面自动梳理一遍，找出按严重级别排序的问题并给出可执行的分阶段修复路线。适合在发布前做健康检查、排查沉默退化或想系统了解项目技术债时使用。特别的是会自适配项目栈、对高危项做对抗式复核并能和上次审计做差异比对，还支持快速体检模式，输出结构化的 findings。
▸ 展开 SKILL.md 英文原文
全面代码库审计 — 自适应并行深度分析（前后端契约、数据完整性、异常处理/安全、架构/技术债、配置/缓存），结构化 findings + 对抗验证 + 基线对比，输出按严重程度排序的统一报告和修复路线图。支持 quick 快速体检模式。Use when user asks to audit, analyze, or review an entire codebase for design issues, find hidden bugs, check architecture health, or asks '全面审查', '代码库审计', '分析设计问题', 'audit codebase', 'health check', '有哪些问题', '快速体检'. Also trigger when user asks to find silent degradation, data flow breakpoints, type mismatches between frontend and backend, or wants to understand technical debt across a project.
帮我安装这个 skill：https://raw.githubusercontent.com/majiayu000/spellbook/main/skills/codebase-audit/SKILL.mdcurl -fsSL "https://raw.githubusercontent.com/majiayu000/spellbook/main/skills/codebase-audit/SKILL.md"# Codebase Audit — Adaptive Deep Analysis Comprehensive codebase audit that adapts its agent configuration to the project's tech stack, forces structured findings, adversarially verifies Critical/High findings before they enter the report, diffs against the previous audit's ledger (resolved / still-open / new), and outputs a severity-sorted report plus a phased repair roadmap. ## Core Principles 1. **READ-ONLY** — Audit agents must never create, modify, or delete files in the target. Every agent prompt starts with the read-only preamble in `references/agent-prompts.md`. 2. **Inherit the session model** — Omit the `model` param on all agents so they inherit the session model (usually the s