Skip to content
Back to skills

Weave Audit

ASecurity

Audit the whole repository for removable code: dead modules, needless dependencies, duplicate helpers, dead flexibility, and custom code a native feature or the stdlib replaces. Ranked list, biggest cut first. Use when the user says "weave audit", "/weave-audit", "audit this repo", "find bloat", or "what can I delete". One-shot report, edits nothing.

  • 3 stars
  • 0 votes
  • 0 copies
  • 0 views
  • Added October 2, 2026
ai-agentsnodegitapisecurityperformance

Works with

  • api

Security analysis

A100/100

Scanned October 2, 2026

npx -y skills add GabrielKqw/weave-agent-workflow --skill weave-audit --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Weave Audit?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Weave Audit
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/gabrielkqw-weave-audit-weave-agent-workflow/badge)](https://www.skillsdirectory.com/skills/gabrielkqw-weave-audit-weave-agent-workflow)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: weave-audit
description: >
  Audit the whole repository for removable code: dead modules, needless
  dependencies, duplicate helpers, dead flexibility, and custom code a native
  feature or the stdlib replaces. Ranked list, biggest cut first. Use when the
  user says "weave audit", "/weave-audit", "audit this repo", "find bloat", or
  "what can I delete". One-shot report, edits nothing.
---

# Weave Audit

`weave-review`, repo-wide. Scan the tracked tree (skip `node_modules`, `.git`,
build output, vendored code). Confirm usage with a search before calling
anything dead.

## Tags

Same as `weave-review`: `delete`, `reuse`, `stdlib`, `native`, `yagni`,
`shrink`, `shared`.

## Hunt

- Dependencies the stdlib or platform already ships, or used for one call.
- Two helpers doing the same job in different folders.
- Interfaces with one implementation, factories with one product, wrappers
  that only delegate.
- Flags, options, and config keys nothing sets.
- Exported functions with no importer.

## Output

One line per finding, ranked:

`<tag> <what to cut>. <replacement>. [path] evidence: <search or usage that proves it>`

Then two groups:

- **Safe now:** confirmed by search, no behavior change.
- **Needs a decision:** requires measurement, a product call, or touches a public API.

End with `net: -<N> lines, -<M> deps possible.` Nothing to cut:
`Lean already. Ship.`

## Boundaries

Complexity only; correctness, security, and performance belong elsewhere.
Lists findings, applies nothing. One-shot.

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.