Paths: File paths (
shared/,references/,../ln-*) are relative to skills repo root.
Type: L2 Coordinator Category: 6XX Audit
Codebase Auditor
Mandatory Read
MANDATORY READ: Load shared/references/evaluation_coordinator_runtime_contract.md, shared/references/evaluation_summary_contract.md, shared/references/evaluation_research_contract.md
MANDATORY READ: Load shared/references/research_tool_fallback.md
Purpose
- audit security, build health, code quality, dependencies, observability, concurrency, lifecycle, and structure
- coordinate
ln-621throughln-629 - require stack-aware research before scoring
Runtime Contract
Runtime family:
evaluation-runtime
Identifier:
codebase-audit
Phase order:
PHASE_0_CONFIGPHASE_1_DISCOVERYPHASE_2_RESEARCHPHASE_3_DELEGATEPHASE_4_AGGREGATEPHASE_5_REPORTPHASE_6_SELF_CHECK
Worker Set
ln-621-security-auditorln-622-build-auditorln-623-code-principles-auditorln-624-code-quality-auditorln-625-dependencies-auditorln-626-dead-code-auditorln-627-observability-auditorln-628-concurrency-auditorln-629-lifecycle-auditor
Worker Invocation (MANDATORY)
Use the Skill tool for delegated workers. Do not inline worker logic inside the coordinator.
TodoWrite format (mandatory):
Resolve audit scope and build manifestLoad codebase structure and stackRun best-practice researchDelegate to domain audit workersAggregate worker findingsGenerate audit reportVerify cleanup and self-check
Representative invocations:
Skill(skill: "ln-621-security-auditor", args: "{scope}")
Skill(skill: "ln-622-build-auditor", args: "{scope}")
Skill(skill: "ln-623-code-principles-auditor", args: "{scope}")
Skill(skill: "ln-624-code-quality-auditor", args: "{scope}")
Skill(skill: "ln-625-dependencies-auditor", args: "{scope}")
Skill(skill: "ln-626-dead-code-auditor", args: "{scope}")
Skill(skill: "ln-627-observability-auditor", args: "{scope}")
Skill(skill: "ln-628-concurrency-auditor", args: "{scope}")
Skill(skill: "ln-629-lifecycle-auditor", args: "{scope}")
Workflow
Phase 0: Config
Start evaluation-runtime with required_research=true.
Phase 1: Discovery
Detect project type, stack, and applicability of audit workers.
Phase 2: Research
Mandatory research sources:
- official docs or standards
- MCP Ref
- Context7 when framework docs matter
- current web best-practice research
Phase 3: Delegate
Delegate applicable audit workers. Child workers must use evaluation-worker-runtime and emit evaluation-compatible summaries.
Phase 4: Aggregate
Merge security, correctness, architecture, and maintainability findings.
Phase 5: Report
Write final codebase audit output and coordinator summary.
Phase 6: Self-Check
Required checks:
- [ ] research completed
- [ ] all applicable worker summaries recorded
- [ ] aggregation completed
- [ ] cleanup verified
- [ ] coordinator summary recorded
Summary Contract
Write summary_kind=evaluation-coordinator.
Definition of Done
- [ ] Evaluation runtime started
- [ ] Applicable workers selected
- [ ] Research completed
- [ ] All applicable worker summaries recorded
- [ ] Final report written
- [ ]
evaluation-coordinatorsummary written - [ ] Runtime completed
Meta-Analysis
MANDATORY READ: Load shared/references/meta_analysis_protocol.md
After the coordinator run, analyze the session per protocol section 7 and include the protocol-formatted output with the final codebase audit result.
References
- Workers:
../ln-621-security-auditor/SKILL.md,../ln-622-build-auditor/SKILL.md,../ln-623-code-principles-auditor/SKILL.md,../ln-624-code-quality-auditor/SKILL.md,../ln-625-dependencies-auditor/SKILL.md,../ln-626-dead-code-auditor/SKILL.md,../ln-627-observability-auditor/SKILL.md,../ln-628-concurrency-auditor/SKILL.md,../ln-629-lifecycle-auditor/SKILL.md
Version: 5.0.0 Last Updated: 2025-12-23