# Audit Build CI

> Audit build and CI configuration for correctness risks

- Skill: `ben-manes/audit-build-ci` (Agent Skill)
- Install (CLI): `npx skillmds@latest add ben-manes/audit-build-ci`
- Raw SKILL.md: https://api.skillmd.com/api/skills/ben-manes/audit-build-ci/raw
- Safety review: pending (external: skill-scanner PASS, skillspector PASS)
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- Author: ben-manes (https://skillmd.com/u/ben-manes)
- Updated: 2026-09-10
- Page: https://skillmd.com/skills/ben-manes/audit-build-ci

---


Audit the build and CI configuration for subtle correctness risks.

Read the build files and CI workflows before analyzing:
- `build.gradle.kts` (root and caffeine module)
- `gradle/plugins/` (custom Gradle plugins)
- `.github/workflows/` (GitHub Actions)
- `gradle.properties`

Consider:
- Misconfigured dependency scopes
- Incorrect test isolation
- Non-reproducible builds
- Incorrect Gradle cache configuration
- Missing failure modes (tests passing when they shouldn't)
- Incorrect CI matrix coverage
- Silent test skipping
- Multi-line YAML values that get interpolated elsewhere (a `>` folded scalar
  keeps a trailing newline; splicing one into another folded scalar embeds that
  newline mid-string, so a consumer splitting on literal spaces mis-parses the
  spliced-in value's last token)
- Performance problems in the build
- Security issues (dependency vulnerabilities, secret exposure)
- Bad practices that could cause false confidence

Report only issues that could cause incorrect artifacts, missing
failures, or false confidence in test results.