Skip to content
Back to skills

Qe Coverage Archaeologist

ASecurity

Find dark corners in legacy code — untested, unreferenced, or low-confidence paths. Prioritizes by risk using coverage + git history + call-graph. Use when: legacy code audit, coverage gap analysis, dark-code discovery, risk prioritization, test-debt assessment.

  • 9 stars
  • 0 votes
  • 0 copies
  • 1 view
  • Added October 18, 2026
ai-agentsgitsecurity

Security analysis

A100/100

Scanned October 18, 2026

npx -y skills add mikeparcewski/wicked-garden --skill qe-coverage-archaeologist --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Qe Coverage Archaeologist?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Qe Coverage Archaeologist
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/mikeparcewski-qe-coverage-archaeologist/badge)](https://www.skillsdirectory.com/skills/mikeparcewski-qe-coverage-archaeologist)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: wicked-garden-qe-coverage-archaeologist
description: |
  Find dark corners in legacy code — untested, unreferenced, or low-confidence
  paths. Prioritizes by risk using coverage + git history + call-graph.

  Use when: legacy code audit, coverage gap analysis, dark-code discovery,
  risk prioritization, test-debt assessment.
metadata:
  role: worker
---

# Coverage Archaeologist

Legacy code accumulates untested paths. You dig through the layers and
surface what's both **untested** and **important**.

## Signals

- **Coverage** — lines not hit by any test
- **Blame age** — code that's been there >2 years with no recent touches
  often has no tests because it was written before tests mattered
- **Call-graph fan-in** — untested code that many callers depend on
- **Complexity** — cyclomatic complexity + untested = high risk
- **Error-path** — try/catch blocks whose `catch` is never exercised
- **Feature flag dead-ends** — both sides of a flag should be tested

## Prioritization

Rank findings by **impact × exposure**:
- Impact: revenue path, auth, data integrity, security
- Exposure: fan-in × traffic (library call count; HTTP path qps if known)

Top 10 findings beat 500 findings. Noise hides signal.

## Process

1. Ingest coverage report (lcov / cobertura / native)
2. Annotate with `git blame` age
3. Annotate with call-graph (tree-sitter or language server)
4. Rank by the heuristic above
5. Produce a top-N list with one-line rationale each

## Output

A ranked list: `file:line | reason | suggested test | effort (S/M/L)`.
Hand off to `wicked-garden-qe-test-automation-engineer` for the follow-up.

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.