Skip to content
Back to skills

Agentic Readiness

ASecurity

Audit and improve repositories for reliable agentic work across Codex and Codex App, Claude Code, and OpenCode. Use when reviewing AGENTS.md or CLAUDE.md quality and discovery, instruction routing in monorepos or meta-repos, agent settings, MCP configuration, skills, subagents, context budgets, or repository organization for coding agents.

  • 155 stars
  • 0 votes
  • 0 copies
  • 3 views
  • Added September 3, 2026
ai-agentspythongobashgitdocumentation

Works with

  • claude code
  • mcp

Security analysis

A100/100

Pro scans all 8 files and shows the line behind each finding

Scanned September 20, 2026

npx -y skills add CodeAlive-AI/ai-driven-development --skill agentic-readiness --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Agentic Readiness?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Agentic Readiness
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/codealive-ai-agentic-readiness/badge)](https://www.skillsdirectory.com/skills/codealive-ai-agentic-readiness)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: agentic-readiness
description: Audit and improve repositories for reliable agentic work across Codex and Codex App, Claude Code, and OpenCode. Use when reviewing AGENTS.md or CLAUDE.md quality and discovery, instruction routing in monorepos or meta-repos, agent settings, MCP configuration, skills, subagents, context budgets, or repository organization for coding agents.
---

# Agentic Readiness

Default to audit-only. Present findings and wait for approval unless the user explicitly asks to implement changes.

## Audit workflow

1. Read the repository's existing instruction chain before inspecting other files.
2. Run from the repository root:

```bash
python scripts/audit_repo.py --root .
```

Add `--include-user-scope` only when the user explicitly wants personal Codex, Claude Code, and OpenCode configuration included. Never inspect credential stores or print secret values.

3. Inspect the JSON report and verify findings against the actual build files, scripts, and repository layout. The script detects structural risks; it cannot prove that documented commands or architecture are current.
4. Read the references needed for the task:
   - [instruction-files.md](references/instruction-files.md) for `AGENTS.md`/`CLAUDE.md` ownership, discovery, routing, compatibility, and CodeAlive lessons learned.
   - [rubric.md](references/rubric.md) for scoring and priority definitions.
   - [checklist.md](references/checklist.md) for the full cross-agent audit.
   - [best-practices.md](references/best-practices.md) for settings, workflows, context, and safety beyond instruction files.
5. Report evidence before recommendations.

### Verify required commands and hooks actually work

For required build/test/lint commands and hooks, confirm they execute the intended
check in the current environment. A configuration entry, hook file, or successful
commit alone is not proof: a missing runner such as `lefthook` can leave checks
unexecuted. Use a safe local invocation or an existing test fixture; do not commit,
push, deploy, or perform a destructive action merely to test a hook. For a blocking
hook, verify that an allowed fixture passes and a violating fixture is rejected.
Confirm test commands ran the intended tests rather than finding zero or skipping
them. Report what ran and its result; label anything not exercised as **not
verified**, distinguishing it from a confirmed failure. Consider existing CI
coverage when assessing the impact of a local gap.

## Report shape

Keep the report concise:

- **Executive summary**: readiness, strongest area, main failure mode, first action.
- **Repository profile**: scale, languages/frameworks, Git/worktree shape.
- **Instruction topology**: canonical file, compatibility shim, nested routing, active-chain caveats, context-budget risks.
- **Agent surfaces**: Codex/Codex App, Claude Code, and OpenCode settings, MCP, skills, and subagents actually present.
- **Issues**: P0 through P3 with file paths and evidence.
- **Recommendations**: concrete edits and verification commands.

Do not penalize a repository for omitting agent-specific configuration it does not need. Do flag a claimed cross-agent setup that one of the named agents cannot discover.

## Implementation workflow

When the user asks to apply changes:

1. Confirm the requested scope from the conversation; do not ask again when it is already explicit.
2. Preserve one source of truth. Prefer root `AGENTS.md` plus a regular `CLAUDE.md` containing `@AGENTS.md` when the same rules should serve all three agents.
3. Put scoped rules near their target paths. Add routing indexes only where they prevent real discovery mistakes.
4. Keep generated directories, dependencies, caches, secondary worktrees, and unrelated subtrees out of routing tables.
5. Turn non-negotiable rules into hooks, linters, or CI checks; instruction files are guidance, not enforcement.
6. Show the diff, rerun the audit and tests, then explain any remaining intentional gaps.

## Large and multi-repository workspaces

For more than 3,000 tracked files, emphasize navigation, bounded routing, focused verification, and retrieval support rather than copying documentation into startup context.

For a directory containing multiple child Git repositories, treat each child as an independent instruction root. Codex builds its instruction chain once per run/session, so changing a command's working directory does not load the child repository's files. Recommend an explicit meta-repository routing rule and verify each child from a fresh session or by reading its chain before the first operation.

Files in this skill

  • SKILL.md3.7 KB
  • agents/openai.yaml229 B
  • references/best-practices.md3.1 KB
  • references/checklist.md3.6 KB
  • references/instruction-files.md9.3 KB
  • references/rubric.md3.8 KB
  • scripts/audit_repo.py29.2 KB
  • scripts/test_audit_repo.py4.3 KB

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.