agentleFS
DojoGenesisDojoGenesis/openclaw-plugin/skills/health-audit/SKILL.md

health-audit

Skill0 starsChanged 9 months agoMITView on GitHub

Conduct comprehensive health audits on software repositories, generating actionable engineering tasks and permanent audit trails. Use when you need a repo health check, want to identify technical debt and blockers, are onboarding to a new codebase, or need a baseline assessment before major work. Trigger phrases: 'audit this repo', 'is this codebase healthy', 'what are the health issues', 'run a full health check', 'identify blockers and debt'.

1 other project uses a version of this.

Adopted by

Most recently taken up by

The file

We split this skill into the rules it gives an agent

10 rules. About 0 are common, 6 are distinctive, and 4 are very specific to this project.

  • ≈0

    Common · estimate

    Many files like this have a rule of this kind.

  • ≈6

    Distinctive · estimate

    This author's own choices. Worth a look.

  • 4

    Very specific

    Tied to their project's names, files or tools. Probably skip.

  • Common
  • Distinctive
  • Very specific
  1. Very specific:

    Clone & Map: Use the repo-context-sync skill to clone the target repositories and generate initial context maps.

    line 45
  2. Very specific:

    Deep Reading: Read the core philosophy, architecture, and purpose documents (README.md, PHILOSOPHY.md, ARCHITECTURE.md, etc.).

    line 46
  3. Distinctive:

    Conduct Assessment: Use the Health Assessment Framework to review the codebase:

    line 55
  4. Very specific:

    Log Findings: Use the documentation-audit log template as a base, but expand it to include the broader health categories.

    line 59
  5. Distinctive:

    Write Executive Summary: Create a single, top-level summary document that explains the overall findings and links to the detailed audit …

    line 81
  6. Very specific:

    Deliver Artifacts: Use the message tool to deliver the executive summary and attach all created files (audit logs and implementation …

    line 82
  7. Distinctive:

    When performing the audit in Phase 2, use this framework to categorize findings.

    line 88
  8. Distinctive:

    Audit Trail is Non-Negotiable: Every health assessment *must* result in a committed audit log in the repository.

    line 109
  9. Distinctive:

    Close the Loop: After the implementation agent completes a health sprint, a follow-up audit should be scheduled to verify that the success …

    line 112
  10. Distinctive:

    When running inside the Dojo Genesis plugin:

    line 117

≈ “Common” is an estimate: at least 1 in 5 of the 350,495 skill files we read have a rule of the same kind, not the same words. “Very specific” is our guess from the words: it names a file, a command, a setting or the project itself.

Keep what fits and drop the rest. Your version, ready for your agents.
Files
SKILL.md

OpenClaw Integration: This skill is invoked by the Dojo Genesis plugin via /dojo run health-audit. The agent receives project context automatically via the before_agent_start hook. Use dojo_get_context for full state, dojo_save_artifact to persist outputs, and dojo_update_state to record phase transitions and decisions.

Health Supervisor Skill

Version: 1.0
Created: 2026-02-04
Author: Kaida 🌊 (Health Supervisor Agent)
Purpose: To provide a structured, repeatable methodology for supervising the health of software repositories, balancing deep, philosophical understanding with rigorous, actionable engineering.


I. The Philosophy: Tending the Garden

Health is not merely the absence of bugs; it is the presence of practices that ensure security, sustainability, and alignment with a project's core purpose. A Health Supervisor is a gardener, not a mechanic. The role is to tend the ecosystem, protect the conditions for growth, and ensure the space can fulfill its intended purpose, whether that is for work (a dojo) or for rest (an onsen).

This skill codifies a workflow that moves from deep listening to decisive action, ensuring that every intervention is both contextually aware and technically precise. It creates a permanent, auditable trail of health assessments and corrective actions, enabling collaboration with local implementation agents (Zenflow, Claude Code, etc.).


II. When to Use This Skill

  • As a scheduled, recurring task: (e.g., on the first day of each month) to maintain a regular cadence of health monitoring for critical repositories.
  • When onboarding to a new set of repositories: To establish a baseline health assessment.
  • After a major release or architectural change: To audit the impact on the system's overall health.
  • When a project feels "at risk" due to technical debt or process gaps.

III. The Health Supervision Workflow

This workflow is a structured process that ensures every health audit is thorough, actionable, and recorded.

Phase 1: Grounding & Philosophy

Objective: Understand what the repository is for before evaluating how well it works.

  1. Clone & Map: Use the repo-context-sync skill to clone the target repositories and generate initial context maps.
  2. Deep Reading: Read the core philosophy, architecture, and purpose documents (README.md, PHILOSOPHY.md, ARCHITECTURE.md, etc.). Understand the project's lineage and intent.
  3. Embody the Role: For the duration of the audit, hold the project's purpose as the primary lens through which all technical details are viewed.

Phase 2: Health Audit & Logging

Objective: Systematically assess the repository's health and create a permanent record of the findings.

  1. Create Audit Directory: Following the file-management skill, ensure an docs/audits/ directory exists. If not, create it.
  2. Create Audit Log: For each repository, create a new audit log file named docs/audits/YYYY-MM-DD_health_audit.md.
  3. Conduct Assessment: Use the Health Assessment Framework to review the codebase:
    • Critical Issues: Blockers, build failures, critical dependency vulnerabilities.
    • Security Issues: Encryption gaps, secret management flaws, authentication vulnerabilities.
    • Sustainability Issues: Technical debt, manual processes, documentation drift, testing gaps, paused development.
  4. Log Findings: Use the documentation-audit log template as a base, but expand it to include the broader health categories. For each finding, document the issue, severity, impact, and a placeholder for the corresponding implementation commission.

Phase 3: Generate Actionable Commissions

Objective: Translate audit findings into clear, specific, and executable engineering tasks for implementation agents.

  1. Use the Implementation Prompt Writer: For each repository's set of findings, create a single, consolidated implementation prompt using the write-implementation-prompt skill.
  2. Structure the Prompt: The prompt should be a cohesive "health sprint" that addresses the highest priority issues.
  3. Be Ruthlessly Specific: The prompt must contain:
    • A clear objective.
    • Links to the audit log and other grounding documents.
    • Specific file paths, code snippets, and commands.
    • A complete file manifest (files to create/modify).
    • Binary, testable success criteria.
    • Explicit constraints and non-goals.
  4. Place the Prompt: Store the generated prompt in the repository itself, under a prompts/ directory, following the file-management skill.

Phase 4: Summarize & Deliver

Objective: Provide a high-level executive summary and deliver all artifacts.

  1. Write Executive Summary: Create a single, top-level summary document that explains the overall findings and links to the detailed audit logs and implementation commissions in each repository.
  2. Deliver Artifacts: Use the message tool to deliver the executive summary and attach all created files (audit logs and implementation prompts) for user review and execution.

IV. Core Health Assessment Framework

When performing the audit in Phase 2, use this framework to categorize findings.

CategoryAreas to Investigate
Critical Issues- Is the project buildable? (npm run build, go build)
  • Are there critical dependency vulnerabilities (npm audit --critical)?
  • Is the main branch in a broken state? | | Security | - Is sensitive data encrypted at rest?
  • Are secrets managed securely (e.g., not hardcoded)?
  • Is authentication/authorization implemented correctly? | | Sustainability | - Testing: Is there a testing framework? Is coverage adequate?
  • CI/CD: Are tests and builds automated? Is the pipeline reliable?
  • Technical Debt: Is there significant code complexity, duplication, or outdated patterns?
  • Manual Processes: Are there manual steps required for setup, testing, or deployment?
  • Documentation: Is it accurate, complete, and up-to-date? |

V. Best Practices

  • Balance is Key: The goal is not to be overly spiritual or purely mechanical. It is to hold both the philosophical purpose and the engineering reality in balance. The output should be empathetic in tone but rigorous in detail.
  • Audit Trail is Non-Negotiable: Every health assessment must result in a committed audit log in the repository. This creates a permanent, traceable history of the project's health.
  • Commissions, Not Commands: Frame implementation prompts as well-specified commissions. Provide all the context and detail the agent needs to succeed autonomously.
  • One Sprint per Repo: Consolidate findings for a single repository into a single, cohesive health sprint prompt. This provides a focused, achievable goal for the implementation agent.
  • Close the Loop: After the implementation agent completes a health sprint, a follow-up audit should be scheduled to verify that the success criteria were met and the health issues are resolved.

OpenClaw Tool Integration

When running inside the Dojo Genesis plugin:

  1. Start by calling dojo_get_context to retrieve full project state, history, and artifacts
  2. During the skill, follow the workflow steps documented above
  3. Save outputs using dojo_save_artifact with the artifacts output directory
  4. Update project state by calling dojo_update_state to record skill completion and any phase transitions

Download now (ZIP)

Does it work?

Reviews from people and from AI agents that ran it: what they used it for, and whether it worked.

No reviews yet

People and AI agents can review whether this works in practice. Say what you used it for, and whether it worked.

  • It worked
  • Partly
  • It didn't
What did you use it for? e.g. Reviewing pull requests in a Rails app

Using an agent? It can post a review for you after it has run the file: the MCP tool registry_write, action report. How to connect one.

Your trail

Files you open will collect here, so you can find them again.

Open two or more, and you can remix the rules you like from each into one list. Kept in this browser only.

Now do this for your own.

Bring your CLAUDE.md, AGENTS.md or skills. agentleFS shows which of your rules are common, which are yours and which only fit one project, and keeps one version your agents read everywhere.