How do I install the Sd0xdev Sd0x Dev Flow Project Audit skill?

Run npx get-skill add tomevault-io/sd0xdev-sd0x-dev-flow-project-audit in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

What does the Sd0xdev Sd0x Dev Flow Project Audit skill do?

Project Audit It is listed under Security on SkillMD.

Is Sd0xdev Sd0x Dev Flow Project Audit safe to use?

This skill has not completed SkillMD's automated safety review yet. Independent scanners report: SkillSpector: PASS, Skill Scanner: PASS. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Sd0xdev Sd0x Dev Flow Project Audit?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Sd0xdev Sd0x Dev Flow Project Audit free to use?

Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.

Who published Sd0xdev Sd0x Dev Flow Project Audit?

tomevault-io (@tomevault-io) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Sd0xdev Sd0x Dev Flow Project Audit by tomevault-io

Name: Sd0xdev Sd0x Dev Flow Project Audit
Author: tomevault-io

File contents

Project Audit

When NOT to Use

Security-specific review (use /codex-security)
Runtime performance profiling
Mid-development review (use /codex-review-fast)

Procedure

Run bash scripts/run-skill.sh project-audit audit.js --json to collect deterministic scores
Parse the JSON output — overall_score, status, dimensions, checks, findings, next_actions
If status = Blocked (P0 findings) — highlight critical gaps, suggest immediate fixes
If status = Needs Work (P1 findings) — format improvement roadmap by dimension
If status = Healthy — summarize strengths, note any P2 improvements
Add qualitative interpretation beyond the scores (e.g., "test ratio is good but concentrated in unit tests")

Script Integration

The audit script runs 12 deterministic checks across 5 dimensions:

Dimension	Checks	What It Measures
oss	2	LICENSE, README quality
robustness	3	CI config, lint/typecheck, test ratio
scope	2	Declared features vs implementation, AC completion
runnability	3	Package manifest, scripts, env/Docker setup
stability	2	Lock file + audit, type configuration

Scoring Model

Each check: 1 (pass) / 0.5 (partial) / 0 (fail) / N/A (skipped)
Dimension score: applicable_sum / applicable_count * 100
Overall score: average of dimension scores
Confidence: applicable_checks / total_checks per dimension

Status Determination

Status	Condition	Exit Code
Blocked	Any P0 finding	2
Needs Work	No P0, has P1	1
Healthy	No P0/P1	0

Script Failure Fallback

If the script fails, report the error and suggest running manually:

bash scripts/run-skill.sh project-audit audit.js --json

Output Format

## Project Audit Report

| Field | Value |
|-------|-------|
| Repo | [name] |
| Score | **[N]/100** |
| Status | [icon] [status] |

### Dimensions
[table of dimension scores]

### Checks
[list of check results with suggestions]

### Next Actions
[prioritized action items]

## Gate: ✅/⛔

References

references/check-catalog.md — Check definitions, scoring criteria, ecosystem detection (read when investigating a specific check result)
references/output-template.md — Report format examples and JSON schema (read when customizing output)

Verification

Script ran successfully
All 12 checks executed (or marked N/A with reason)
Qualitative interpretation added beyond raw scores
Next actions are actionable (include commands where applicable)

Converted and distributed by TomeVault — claim your Tome and manage your conversions.

---name: sd0xdev-sd0x-dev-flow-project-auditdescription: Project Audit---# Project Audit## When NOT to Use- Security-specific review (use `/codex-security`)- Runtime performance profiling- Mid-development review (use `/codex-review-fast`)## Procedure1. Run `bash scripts/run-skill.sh project-audit audit.js --json` to collect deterministic scores2. Parse the JSON output — overall_score, status, dimensions, checks, findings, next_actions3. **If status = Blocked** (P0 findings) — highlight critical gaps, suggest immediate fixes4. **If status = Needs Work** (P1 findings) — format improvement roadmap by dimension5. **If status = Healthy** — summarize strengths, note any P2 improvements6. Add qualitative interpretation beyond the scores (e.g., "test ratio is good but concentrated in unit tests")## Script IntegrationThe audit script runs 12 deterministic checks across 5 dimensions:| Dimension | Checks | What It Measures ||-----------|--------|-----------------|| oss | 2 | LICENSE, README quality || robustness | 3 | CI config, lint/typecheck, test ratio || scope | 2 | Declared features vs implementation, AC completion || runnability | 3 | Package manifest, scripts, env/Docker setup || stability | 2 | Lock file + audit, type configuration |### Scoring Model- Each check: `1` (pass) / `0.5` (partial) / `0` (fail) / `N/A` (skipped)- Dimension score: `applicable_sum / applicable_count * 100`- Overall score: average of dimension scores- Confidence: `applicable_checks / total_checks` per dimension### Status Determination| Status | Condition | Exit Code ||--------|-----------|-----------|| Blocked | Any P0 finding | 2 || Needs Work | No P0, has P1 | 1 || Healthy | No P0/P1 | 0 |### Script Failure FallbackIf the script fails, report the error and suggest running manually:```bashbash scripts/run-skill.sh project-audit audit.js --json```## Output Format```## Project Audit Report| Field | Value ||-------|-------|| Repo | [name] || Score | **[N]/100** || Status | [icon] [status] |### Dimensions[table of dimension scores]### Checks[list of check results with suggestions]### Next Actions[prioritized action items]## Gate: ✅/⛔```## References- `references/check-catalog.md` — Check definitions, scoring criteria, ecosystem detection (read when investigating a specific check result)- `references/output-template.md` — Report format examples and JSON schema (read when customizing output)## Verification- [ ] Script ran successfully- [ ] All 12 checks executed (or marked N/A with reason)- [ ] Qualitative interpretation added beyond raw scores- [ ] Next actions are actionable (include commands where applicable)---> Converted and distributed by [TomeVault](https://tomevault.io/claim/sd0xdev) — claim your Tome and manage your conversions.

Frequently asked questions

Sd0xdev Sd0x Dev Flow Project Audit