Skip to content
Back to skills

Github Repo Health Stinger

ASecurity

Audit GitHub repository hygiene. Use for branch protection, CI checks, CODEOWNERS, templates, README coverage, or commit history. Read README.md for the guide map.

  • 85 stars
  • 0 votes
  • 0 copies
  • 1 view
  • Added September 9, 2026
documentationgitapisecuritydocumentation

Works with

  • cli
  • api

Security analysis

A100/100

Pro scans all 20 files and shows the line behind each finding

Scanned September 27, 2026

npx -y skills add legioncodeinc/vibe-coding-tools --skill github-repo-health-stinger --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Github Repo Health Stinger?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Github Repo Health Stinger
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/legioncodeinc-github-repo-health-stinger/badge)](https://www.skillsdirectory.com/skills/legioncodeinc-github-repo-health-stinger)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: "github-repo-health-stinger"
description: "Audit GitHub repository hygiene. Use for branch protection, CI checks, CODEOWNERS, templates, README coverage, or commit history. Read README.md for the guide map."
license: AGPL-3.0-or-later
---

# GitHub Repo Health Stinger

Start with [README.md](README.md) for the workflow map and detailed references.

You are equipped to audit GitHub repositories across eight hygiene dimensions and produce a scored report with a prioritized remediation plan. This stinger encodes the 2026 authoritative checklist derived from GitHub's official documentation, the Conventional Commits specification, and community best practices.

**Always start with `guides/00-principles.md`** - it defines the audit-only boundary, the scoring rubric, the API scope declaration, and the handoff rules to `ci-release-wasp-drone`.

---

## Stinger routing table

| Task | Primary guide(s) |
|---|---|
| Branching strategy audit | `guides/01-branching-strategy.md` |
| Branch protection / rulesets | `guides/02-branch-protection.md` |
| Commit history / Conventional Commits | `guides/03-commit-quality.md` |
| CODEOWNERS presence and coverage | `guides/04-codeowners.md` |
| CI workflow density | `guides/05-ci-workflows.md` |
| README and docs presence | `guides/06-docs-presence.md` |
| .gitignore coverage | `guides/07-gitignore.md` |
| Issue and PR templates | `guides/08-templates.md` |
| Repository settings | `guides/09-repo-settings.md` |
| Full audit (all dimensions) | All guides in order; use `templates/audit-report.md` |

---

## Data collection methods (declare at invocation time)

Three modes supported; declare which is in use in the report header:

1. **Local clone + `gh` CLI** - most complete; requires `gh auth login` and `gh repo view --json` access.
2. **GitHub REST API** - requires a personal access token with `repo` scope for private repos; fine-grained tokens supported.
3. **Local clone only** - inspects file system (workflows, .gitignore, CODEOWNERS, templates) without API calls; branch protection data is unavailable.

Declare coverage gaps when running in mode 3. See `guides/00-principles.md` §2.

---

## Hard rules (from `guides/00-principles.md`)

1. **Audit only. Never write to the repo.** The Drone reads; it never modifies branch protection, CI files, or repository settings. All findings are phrased as recommendations, not automated fixes.
2. **Cite the exact path or GitHub Settings URL for every finding.**
3. **Score every dimension**, even when the score is perfect.
4. **Prioritize by impact × effort**, not by dimension order. The remediation list must be ranked.
5. **Hand off CI architecture depth to `ci-release-wasp-drone`.** Workflow gap findings surface the issue and name `ci-release-wasp-drone` as the next step; they do not deep-dive into workflow design.
6. **Hand off secret scanning results to `security-wasp-drone`.** Whether secret scanning is *enabled* is this Drone's check; what leaked secrets *mean* is `security-wasp-drone`'s job.
7. **Declare API scope** used for data collection at the top of every report.

---

## Scoring dimensions and weights

The full audit report scores eight dimensions (0-10 each). Dimension weights reflect typical team impact:

| # | Dimension | Weight | Scoring rubric |
|---|---|---|---|
| 1 | Branch protection / rulesets | 20% | `guides/02-branch-protection.md` |
| 2 | Commit quality (Conventional Commits) | 15% | `guides/03-commit-quality.md` |
| 3 | CODEOWNERS coverage | 15% | `guides/04-codeowners.md` |
| 4 | CI workflow density | 15% | `guides/05-ci-workflows.md` |
| 5 | Docs presence | 10% | `guides/06-docs-presence.md` |
| 6 | Repository settings | 10% | `guides/09-repo-settings.md` |
| 7 | Issue/PR templates | 8% | `guides/08-templates.md` |
| 8 | .gitignore coverage | 7% | `guides/07-gitignore.md` |

Branching strategy is assessed qualitatively (narrative section) rather than scored numerically, because the "right" strategy depends on team size and release cadence.

Overall score = sum(dimension_score × weight). Report as a percentage (0-100).

---

## References

- Full guides: `guides/` (00 through 09)
- Worked examples: `examples/`
- Audit report template: `templates/audit-report.md`
- CODEOWNERS template: `templates/CODEOWNERS.example`
- Research: `research/research-summary.md` (executi

Files in this skill

  • README.md603 B
  • SKILL.md4.8 KB
  • examples/happy-path-full-audit.md3.7 KB
  • examples/scoped-audit-branch-protection-only.md2.2 KB
  • guides/00-principles.md3.2 KB
  • guides/01-branching-strategy.md2.4 KB
  • guides/02-branch-protection.md2.7 KB
  • guides/03-commit-quality.md2.9 KB
  • guides/04-codeowners.md2.7 KB
  • guides/05-ci-workflows.md3.1 KB
  • guides/06-docs-presence.md2.5 KB
  • guides/07-gitignore.md2.6 KB
  • guides/08-templates.md2.2 KB
  • guides/09-repo-settings.md3.3 KB
  • reports/README.md656 B
  • research/external/01-github-rulesets-docs.md2.4 KB
  • research/external/02-conventional-commits-spec.md1.7 KB
  • research/external/03-codeowners-docs.md1.9 KB
  • research/external/04-issue-pr-templates-docs.md1.7 KB
  • research/external/05-repo-security-settings.md1.8 KB

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.