CI workflow checks for test/lint/build coverage and reliability.

Avalia pipelines CI/CD, detectando gaps e oportunidades de melhoria.

Analisa padrões de qualidade de código e detecta code smells, complexidade elevada e duplicação.

Analisa dependências para identificar falta de uso, versões permissivas ou riscos.

Avalia a documentação (README, CONTRIBUTING, etc.) para encontrar lacunas de clareza e onboarding.

Converte achados de outras skills em issues e comentários prontos para o GitHub.

Evaluate repository maturity on GitHub controls such as Actions hardening, CODEOWNERS, and branch protections.

Reliability checks for Go modules with focus on module setup, tests, and CI behavior.

Detect risky default configurations, fail-open behavior, and unsafe bootstrap states.

Governance checks for Node.js repositories, including docs and package hygiene.

Map findings to common OWASP-style risk areas for web/API repositories with concrete evidence.

Language-agnostic governance checks for repositories with unknown or mixed stacks.

Quality checks for Python repositories covering packaging, tooling, and test conventions.

Analisa o perfil do repositório e extrai um modelo estruturado com evidências para orientar outras análises.

Assess whether repository structure and CI are ready for sustainable static security analysis.

Baseline checks for repository-level security posture and supply chain hygiene.

Detecta riscos básicos de segurança em repositórios (segredos expostos, configurações perigosas, padrões inseguros) e gera recomendações com evidências.

Evaluate whether security-critical areas have clear ownership and sustainable response capacity.

Assess readiness and coverage for dependency vulnerability scanning and remediation workflow.

Provide repository-specific guidance for adopting Semgrep safely and with low noise.