audit-debt
Harvest in-code debt markers (TODO/FIXME/HACK/XXX and known shortcuts) from a codebase and surface each as a finding, clustered by area.
Skill by krixon
Install
Works with Claude Code, Claude apps, Codex, Cursor, Gemini CLI, GitHub Copilot, VS Code, OpenCode, Goose, Windsurf. Read the repository before you give any tool access to your data.
npx agentmarket install skill/krixon-audit-debt
Asks which of your tools to add it to (Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI, Claude Desktop) and shows the change first. See https://agentmart.dev/cli.
Get the weekly diff
The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.
About
Use cases: security, productivity
Reviews
Write a reviewNo reviews yet. Installed it? Reviews come from verified installers only. How reviews work
Permissions
What this skill can do and what it asks for, from its SKILL.md. Checked Oct 25, 2026.
- Tools
- No tools found
- Secrets
- None asked for
- Install scripts
- None found
Network hosts it talks to 1
codeload.github.com· found in install command
Files it touches
~/.claude/skills/audit-debt
What's inside
- Skill name
audit-debt- Description
- Harvest in-code debt markers (TODO/FIXME/HACK/XXX and known shortcuts) from a codebase and surface each as a finding, clustered by area. Static-first, no debt tool required. Use when the user wants to harvest TODOs, find tech debt, audit shortcuts, or asks "what's left to clean up?".
- License
- MIT
- Instructions
- 34 lines in SKILL.md · view on GitHub
Files (1)
- SKILL.md
SKILL.md (first lines)
# Debt Audit Harvest the **in-code debt markers** a codebase has accumulated — `TODO`, `FIXME`, `HACK`, `XXX`, and the project's own known shortcuts — and surface each as a finding. Run the shared audit method in [../AUDIT-METHOD.md](../AUDIT-METHOD.md) with the lens and dimension below. The aim is *risk-weighted* debt — rank by the criticality of the area a marker sits in, never by marker count. A `FIXME` in the payment path outranks ten `TODO`s in a sample script. ## Risk lens (step 1) Sweep for markers — `TODO`, `FIXME`, `HACK`, `XXX`, and any shortcut convention the project documents — then rank each by the **criticality of the area it sits in**: money, auth, data integrity, external side effects outrank cosmetic or test-scaffold code. The marker's own urgency (`FIXME`/`HACK` over `TODO`) breaks ties. Consume an existing marker report here if one is present (a `// FIXME` lint pass, a debt-tracker export); never require a tool to produce one. ## Current state: confirm the marker is live (step 2) For each high-ranked marker, confirm it is still real before emitting: - **Not already resolved** — the code the marker describes may have changed out from under it; a stale marker pointing at fixed code is noise, not debt. - **Not already tracked** — a marker that names or duplicates an open issue is already on the tracker; drop it. ## Dimension (step 4) - **Dimension** — `debt` - **Suggested category** — `enhancement` (paying down a shortcut); a marker flagging a known-wrong behavior is a `bug` - **Where** — the module / type / function the marker sits in - **Evidence** — the marker text and the shortcut it records, plus why the area makes it worth paying down - **Cluster** — fold related markers in one area into a single finding via the **Instances** block in [../contracts/finding.md](../contracts/finding.md), rather than one finding per line ## Handover Per [../AUDIT-METHOD.md](../AUDIT-METHOD.md) → *Handover*. - **artifact:** findings (in [../contracts/finding.md](../contracts/finding.md) shape, dimension `debt`, `Source: audit-debt`) - **default:** `capture` — dedups against open issues, culls, files survivors as `needs-triage` - **alternatives:** stop (review the findings yourself first)
From krixon/skills, MIT.
More from krixon/skills
- 0.502score
auto
krixon
Run a skill workflow unattended — walk the handover chain taking the recommended hop at each step, without asking.
SkillCFreshness: C★ 1Claude Code +9 - 0.497score
audit-error-handling
krixon
Sweep a codebase for error-handling defects — swallowed errors, bare catch-alls, and critical calls with no failure path — and surface each as a finding.
SkillCFreshness: C★ 1Claude Code +9 - 0.497score
audit-observability
krixon
Sweep a codebase for critical paths that run blind — no log, metric, or trace at any layer — and surface each as a finding.
SkillCFreshness: C★ 1Claude Code +9 - 0.497score
audit-performance
krixon
Sweep a codebase for performance hazards on hot paths — N+1 data access, per-iteration allocation or IO in loops, unbounded reads, missing caching or…
SkillCFreshness: C★ 1Claude Code +9 - 0.497score
audit-resource-leak
krixon
Sweep a codebase for resource-leak sites — acquired handles, connections, contexts, or locks with no guaranteed release on every path — and surface each as a…
SkillCFreshness: C★ 1Claude Code +9 - 0.497score
audit-coverage
krixon
Audit a codebase for high-risk untested paths and surface them as findings.
SkillCFreshness: C★ 1Claude Code +9 - 0.497score
audit-dead-code
krixon
Sweep a codebase for dead code — unreachable branches, never-called functions, orphaned modules — and surface each as a finding.
SkillCFreshness: C★ 1Claude Code +9 - 0.497score
audit-docs
krixon
Audit a codebase for documentation that has drifted out of sync with the code — stale vocabulary, violated decisions, README/behavior claims the code no…
SkillCFreshness: C★ 1Claude Code +9 - 0.497score
audit-security
krixon
Sweep a codebase for security exposure and surface each as a finding.
SkillCFreshness: C★ 1Claude Code +9 - 0.497score
audit-deps
krixon
Sweep a codebase for unhealthy third-party dependencies — outdated majors on load-bearing deps, versions with known advisories, abandoned upstreams, and…
SkillCFreshness: C★ 1Claude Code +9 - 0.497score
deepen
krixon
Find deepening opportunities in a codebase, informed by the project's established domain language and recorded decisions.
SkillCFreshness: C★ 1Claude Code +9 - 0.497score
discover
krixon
Grill the user about a product idea before any technical design — challenge that the problem is real, sharpen who it serves, weigh its value against the cost…
SkillCFreshness: C★ 1Claude Code +9
Signals
- Stars
- 1
- Forks
- 0
- Open issues
- 11
- Last commit (this folder)
- Jun 7, 2026 (4 months ago)
From GitHub (fetched Oct 24, 2026).
Details
- License
- MIT
- Repository
- github.com/krixon/skills
- First seen
- Oct 24, 2026
- Last checked
- Oct 24, 2026
- Source
- GitHubgithub-graphql
More from krixon
- 0.502score
auto
krixon
Run a skill workflow unattended — walk the handover chain taking the recommended hop at each step, without asking.
SkillCFreshness: C★ 1Claude Code +9 - 0.497score
audit-observability
krixon
Sweep a codebase for critical paths that run blind — no log, metric, or trace at any layer — and surface each as a finding.
SkillCFreshness: C★ 1Claude Code +9 - 0.497score
audit-performance
krixon
Sweep a codebase for performance hazards on hot paths — N+1 data access, per-iteration allocation or IO in loops, unbounded reads, missing caching or…
SkillCFreshness: C★ 1Claude Code +9 - 0.497score
audit-resource-leak
krixon
Sweep a codebase for resource-leak sites — acquired handles, connections, contexts, or locks with no guaranteed release on every path — and surface each as a…
SkillCFreshness: C★ 1Claude Code +9 - 0.497score
audit-coverage
krixon
Audit a codebase for high-risk untested paths and surface them as findings.
SkillCFreshness: C★ 1Claude Code +9 - 0.497score
audit-error-handling
krixon
Sweep a codebase for error-handling defects — swallowed errors, bare catch-alls, and critical calls with no failure path — and surface each as a finding.
SkillCFreshness: C★ 1Claude Code +9
Cite this page
audit-debt skill. Agent Mart. https://agentmart.dev/skills/krixon-audit-debt (last updated 2026-10-24)