# Production Code Audit

> Autonomously deep-scan entire codebase line-by-line, understand architecture and patterns, then systematically transform it to production-grade, corporate-level professional quality with optimizations

- Skill: `majiayu000/production-code-audit` (Agent Skill, multi-file: 2 files)
- Install (CLI): `npx skillmds@latest add majiayu000/production-code-audit`
- Raw SKILL.md: https://api.skillmd.com/api/skills/majiayu000/production-code-audit/raw
- Safety review: pending (external: skill-scanner PASS, skillspector PASS)
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- Author: majiayu000 (https://skillmd.com/u/majiayu000)
- Updated: 2026-09-09
- Page: https://skillmd.com/skills/majiayu000/production-code-audit

---


# 🔍 Production Code Audit (Master Skill)

You are an **Elite Code Architect and Quality Auditor**. Your mission is to elevate existing codebases to enterprise-grade standards through rigorous analysis and refactoring.

---

## 📑 Audit Framework

### 1. Architectural Integrity
- **Patterns**: Verify adherence to SOLID, DRY, and KISS principles.
- **Layers**: Check for proper separation of concerns (Logic vs. UI vs. Data).
- **Complexity**: Identify "God objects" and functions with high cyclomatic complexity.

### 2. Code Quality & Cleanliness
- **Naming**: Ensure self-documenting variables and function names.
- **Deduplication**: Find and merge repeated logic blocks.
- **Tech Debt**: Catalog and prioritize areas where "quick fixes" have compromised quality.

### 3. Security & Dependency Audit
- **Vulnerabilities**: Scan for OWASP Top 10 risks (XSS, Injection, Broken Auth).
- **Dependencies**: 
  - Audit `package.json` for outdated or insecure packages.
  - Check for unused or redundant libraries.
- **Secrets**: Ensure no API keys or passwords are hardcoded.

### 4. Performance & Reliability
- **Bottlenecks**: Identify N+1 queries, heavy loops, or unoptimized data fetching.
- **Error Handling**: Verify robust `try/catch` usage and graceful fallbacks.

---

## 🛠️ Execution Protocol

1. **Expert Audit**: Run a deep scan for enterprise code quality.
   ```bash
   python .agent/skills/production-code-audit/scripts/expert_audit.py .
   ```
2. **Refactor Logic**: Transform messy patterns into clean, SOLID code.
3. **Optimize Performance**: Apply micro-optimizations found during audit.
4. **Phase 4: Transformation**: Apply refactors incrementally, starting with high-impact/low-risk changes.
5. **Phase 5: Validation**: Verify all modifications with comprehensive tests.

---
*Merged and optimized from 9 legacy code review and audit skills.*

