cloudflare / security-audit-skill
Code health
This codebase scores 7.4 out of 10 for code health, which we rate good. It also scores maintainability 6.1 and static performance 9.8 out of 10. The three are scored separately and never blended into one number. Risk is concentrated, as it usually is: 1 of 21 files are git hotspots, and they average 5.3 — which is where the fixes pay off most.
Do next
1 suggested
1 thing worth doing in the week to Sep 14, the last indexed commit.
Worth planning
Tidy the code shape this week's commits left: 16 findings in 2 files
1 commit in the last 7 days added or worsened long, complex or deeply nested code, still open. Start with
skills/security-audit/validate-coverage-ledger.cjs(8 findings): tidying it while the change is fresh costs less than after the next one.- code-shape findings
- 16
- files
- 2
- commits
- 1
Medium effort
- Lines of code
- 2.8K
Recent activity
All commitsCommits
- c1c8a8c1Clarify guidance and full audit modes1mo ago
- 158eb448Rework the audit workflow, findings contract, and validators end to end1mo ago
- c1239b90Bring the whole skill into one coherent house style3mo ago
- b6b3f15aAdd AI/LLM, HTTP-protocol/auth, and client-side attack-class companions3mo ago
- 78d28faffix: move MEMORY-SAFETY-AND-BINARY.md to skills/security-audit/3mo ago
- f5c2df0aAdd memory-safety, binary, and kernel hunting classes for native targets3mo ago
Everything we found
63 open
Every detector's open count by area, each with its worst example. An inventory, not a to-do list: the actions above are the part worth doing.
- worst item is medium severity. Code health54Complex conditional · skills/security-audit/validate-findings.cjs27 findings · 4.3 deducted
- worst item is low severity. Refactoring3collectUnitErrors+0.1 health, M effort · skills/security-audit/validate-coverage-ledger.cjs
- worst item is medium severity. Decisions3skills/security-audit/validate-findings.cjs2 awaiting review · 1 hotspots ungoverned
- worst item is medium severity. Ownership3skills/security-audit/validate-coverage-ledger.cjs100% single-owner concentration, 1 commits in 90d
Composition
Open the graph- javascript100%
Explore this codebase
- Docs16 pages across 1 modules
- ChatAsk this codebase a question and get an answer with its sources.
- Files21 files with per-file docs, health and history
- ArchitectureDependency graph, layers, and 0 entry points
- Code healthPer-file scores, 56 open findings, coverage and refactoring targets
- Knowledge graphEntities, communities, and the paths between them
- Change couplingFiles that keep changing together, mined from commit history
- CommitsChange-risk ranked history with agent provenance
- ContributorsBus factor, per-file maintainers, and the human/agent split
- StatsSize class, origin, lifetime churn, rhythm and records
- CostsWhat indexing this snapshot cost, by model and by run.