code-audit-scripts

Run deterministic code security and quality scans — secret detection, debug artifact cleanup, and TODO/FIXME tracking. Use this skill before any security review, code audit, PR review, or when the user says 'scan for secrets', 'find debug logs', 'check for TODOs', 'audit this code', 'security scan', or 'clean up before shipping'. Also use proactively before deployments or when reviewing unfamiliar codebases. Runs all scans in parallel for speed.

PART OF

bOpen Review →

Install the complete plugin to include its agents, hooks, commands, and runtime context.

Claude pluginCodex pluginGrok BuildOpenCode + portable skills

PUBLISHER: b-open-io
RELATIONSHIP: authored
VERSION: 1.0.0
BENCHMARK: unknown

[ RECOMMENDED INSTALL ]

Install bOpen Review

The complete plugin is the supported path. It preserves everything the publisher designed to work alongside this skill.

Claude Code

VERIFIED

Codex

VERIFIED

Grok Build

VERIFIED

This is the grok CLI, not Grok Bot.
grok plugin details review

Grok Bot

GUIDED SETUP

Paste this request into your Bot’s conversation. It will report what it can add.

OpenCode

VERIFIED

Paste into OpenCode. Restart after installation.
Includes native agents, commands, skills and supported hooks/MCP. HammerTime uses bounded follow-up turns in persistent sessions.

[ ADVANCED · INDIVIDUAL SKILL ]

Install only this skill

Use this narrower path only when you intentionally want the portable SKILL.md without the plugin’s surrounding capabilities.

Skills CLI

VERIFIED

Installs only the portable skill; it omits plugin hooks, agents, commands, apps/MCP configuration, and unlisted companion skills.

Grok Bot

GUIDED SETUP

Paste into your Bot’s conversation. Once saved, use / to select the skill.

[ PROVENANCE ]

Trace it to the source.

DISTRIBUTED SOURCE: modules/review/skills/code-audit-scripts/SKILL.md ↗
UPSTREAM SOURCE: No separate upstream declared
DISTRIBUTED DIGEST: sha256:ad6d741f8bb357ead5afadda60c3950046d29745d81a9d90277d9177b1522c21
LOCK HASH: Not applicable

Companion skills

No required companion skills are declared.

Agents using this skill

Paul

Operational and runtime security agent. Use this agent when the user asks to "scan our dependencies for CVEs", "check for leaked secrets", "is this OWASP compliant", "audit our Vercel security posture", or "run a supply chain audit". Covers Vercel Security Dashboard triage, incident response, and SOC 2 technical control validation. Not for code-level audits (use code-auditor) or architectural review (use architecture-reviewer).

[ SOCIAL SHARE ]

Share this skill.

Pass the canonical page to a teammate or keep it close for later.

SHARE TO X LINKEDIN