CI workflow checks for test/lint/build coverage and reliability.

Avalia pipelines CI/CD, detectando gaps e oportunidades de melhoria.

Analisa padrões de qualidade de código e detecta code smells, complexidade elevada e duplicação.

Analisa dependências para identificar falta de uso, versões permissivas ou riscos.

Avalia a documentação (README, CONTRIBUTING, etc.) para encontrar lacunas de clareza e onboarding.

Converte achados de outras skills em issues e comentários prontos para o GitHub.

Reliability checks for Go modules with focus on module setup, tests, and CI behavior.

Detect risky default configurations, fail-open behavior, and unsafe bootstrap states.

Governance checks for Node.js repositories, including docs and package hygiene.

Map findings to common OWASP-style risk areas for web/API repositories with concrete evidence.

Language-agnostic governance checks for repositories with unknown or mixed stacks.

Quality checks for Python repositories covering packaging, tooling, and test conventions.

Analisa o perfil do repositório e extrai um modelo estruturado com evidências para orientar outras análises.

Rust-focused checks for cargo setup, safety posture, and test/CI quality gates.

Assess whether repository structure and CI are ready for sustainable static security analysis.

Baseline checks for repository-level security posture and supply chain hygiene.

Detecta riscos básicos de segurança em repositórios (segredos expostos, configurações perigosas, padrões inseguros) e gera recomendações com evidências.

Evaluate whether security-critical areas have clear ownership and sustainable response capacity.

Assess readiness and coverage for dependency vulnerability scanning and remediation workflow.

Provide repository-specific guidance for adopting Semgrep safely and with low noise.