360 Secure SkillHub
360 安全技能中心

Minimalist Audit

对目标代码库或目录执行极简审计:查找零引用导出、未使用依赖、单用户抽象、从未变化的配置、重复辅助函数和陈旧注释代码,按估计可删除行数排序列出候选并标注风险等级,最后总结可删除总行数和三项最低风险起点。

divyeshjayswal
divyeshjayswal
热度 11.26
最近更新 2026-07-04 00:26:50
分类:开发依赖:读写文件应用场景:代码审查 / 报告撰写

安装技能

复制下面的话术发给你的 Agent,它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill: npx secure-skills-cli add minimalist-audit
Metadata
name
minimalist-audit
description
Audit a codebase or directory for deletion candidates: dead code, unused dependencies, single-use abstractions, config that never varies, and duplicated helpers. Use when the user says "minimalist audit" or asks what can be deleted from a project.
license
MIT

Minimalist Audit

Walk the target and produce a ranked deletion list. For each candidate: path — est. LOC removable — evidence — risk (low/med/high).

Look for:

  1. Exports with zero references (verify by searching, don't guess).
  2. Dependencies in the manifest never imported, or imported for one function the stdlib has.
  3. Abstractions (interfaces, factories, base classes) with exactly one concrete user.
  4. Config values that have never differed between environments.
  5. Copy-pasted helpers that already exist elsewhere in the repo.
  6. Commented-out code and "TODO later" scaffolding older than the file's median age.

End with a one-paragraph summary: total estimated removable LOC and the top three lowest-risk deletions to start with. Never mark tests, validation, auth or error paths as dead without proven zero references.