Paths: File paths (shared/ , references/ , ../ln-* ) are relative to skills repo root.

Type: L2 Coordinator Category: 6XX Audit

Codebase Auditor

Mandatory Read

MANDATORY READ: Load shared/references/evaluation_coordinator_runtime_contract.md , shared/references/evaluation_summary_contract.md , shared/references/evaluation_research_contract.md

MANDATORY READ: Load shared/references/research_tool_fallback.md

Purpose

• audit security, build health, code quality, dependencies, observability, concurrency, lifecycle, and structure

• coordinate ln-621 through ln-629

• require stack-aware research before scoring

Runtime Contract

Runtime family:

• evaluation-runtime

Identifier:

• codebase-audit

Phase order:

• PHASE_0_CONFIG

• PHASE_1_DISCOVERY

• PHASE_2_RESEARCH

• PHASE_3_DELEGATE

• PHASE_4_AGGREGATE

• PHASE_5_REPORT

• PHASE_6_SELF_CHECK

Worker Set

• ln-621-security-auditor

• ln-622-build-auditor

• ln-623-code-principles-auditor

• ln-624-code-quality-auditor

• ln-625-dependencies-auditor

• ln-626-dead-code-auditor

• ln-627-observability-auditor

• ln-628-concurrency-auditor

• ln-629-lifecycle-auditor

Worker Invocation (MANDATORY)

Use the Skill tool for delegated workers. Do not inline worker logic inside the coordinator.

TodoWrite format (mandatory):

• Resolve audit scope and build manifest

• Load codebase structure and stack

• Run best-practice research

• Delegate to domain audit workers

• Aggregate worker findings

• Generate audit report

• Verify cleanup and self-check

Representative invocations:

Skill(skill: "ln-621-security-auditor", args: "{scope}") Skill(skill: "ln-622-build-auditor", args: "{scope}") Skill(skill: "ln-623-code-principles-auditor", args: "{scope}") Skill(skill: "ln-624-code-quality-auditor", args: "{scope}") Skill(skill: "ln-625-dependencies-auditor", args: "{scope}") Skill(skill: "ln-626-dead-code-auditor", args: "{scope}") Skill(skill: "ln-627-observability-auditor", args: "{scope}") Skill(skill: "ln-628-concurrency-auditor", args: "{scope}") Skill(skill: "ln-629-lifecycle-auditor", args: "{scope}")

Workflow

Phase 0: Config

Start evaluation-runtime with required_research=true .

Phase 1: Discovery

Detect project type, stack, and applicability of audit workers.

Phase 2: Research

Mandatory research sources:

• official docs or standards

• MCP Ref

• Context7 when framework docs matter

• current web best-practice research

Phase 3: Delegate

Delegate applicable audit workers. Child workers must use evaluation-worker-runtime and emit evaluation-compatible summaries.

Phase 4: Aggregate

Merge security, correctness, architecture, and maintainability findings.

Phase 5: Report

Write final codebase audit output and coordinator summary.

Phase 6: Self-Check

Required checks:

• research completed

• all applicable worker summaries recorded

• aggregation completed

• cleanup verified

• coordinator summary recorded

Summary Contract

Write summary_kind=evaluation-coordinator .

Definition of Done

• Evaluation runtime started

• Applicable workers selected

• Research completed

• All applicable worker summaries recorded

• Final report written

• evaluation-coordinator summary written

• Runtime completed

Meta-Analysis

MANDATORY READ: Load shared/references/meta_analysis_protocol.md

After the coordinator run, analyze the session per protocol section 7 and include the protocol-formatted output with the final codebase audit result.

References

• Workers: ../ln-621-security-auditor/SKILL.md , ../ln-622-build-auditor/SKILL.md , ../ln-623-code-principles-auditor/SKILL.md , ../ln-624-code-quality-auditor/SKILL.md , ../ln-625-dependencies-auditor/SKILL.md , ../ln-626-dead-code-auditor/SKILL.md , ../ln-627-observability-auditor/SKILL.md , ../ln-628-concurrency-auditor/SKILL.md , ../ln-629-lifecycle-auditor/SKILL.md

Version: 5.0.0 Last Updated: 2025-12-23