module-audit-agent

$npx mdskill add wednesday-solutions/ai-agent-skills/module-audit-agent

Audits module health and recommends refactoring actions.

  • Assesses whether a module is safe to refactor or rewrite.
  • Uses brownfield-chat and brownfield-fix for structural and risk analysis.
  • Combines risk score, blast radius, and architecture violations for recommendation.
  • Generates tests automatically when coverage is low and risk is high.

SKILL.md

.github/skills/module-audit-agentView on GitHub ↗
---
name: module-audit-agent
description: Use when asked to audit a module, check its health, or assess whether it should be refactored. Runs structural query, risk check, and test generation automatically.
license: MIT
metadata:
  author: wednesday-solutions
  version: "1.0"
requires:
  - brownfield-chat
  - brownfield-fix
permissions:
  allow:
    - Bash(wednesday-skills score *)
    - Bash(wednesday-skills blast *)
    - Bash(wednesday-skills gen-tests *)
---

# Module Audit Agent

## When to use
- "Audit this module"
- "Is it safe to refactor X?"
- "What is the health of this service?"
- "Should we rewrite X?"

## What to do

1. **In parallel:**
   - **brownfield-chat** — Read `dep-graph.json` and `summaries.json` for the target module. Report: what it does, its imports, what imports it, and any known conflicts.
   - **brownfield-fix** — Run `wednesday-skills score <module>` and `wednesday-skills blast <module>`. Report risk band and total dependent count.

2. Present the combined audit report:
   - Purpose summary (from summaries.json)
   - Risk score + band (0–30 low / 31–60 medium / 61–80 high / 81–100 critical)
   - Blast radius (dependent count, cross-language flagged separately)
   - Architecture violations or danger zone warnings (from MASTER.md)
   - Recommendation: proceed / review / senior sign-off / do not touch

3. **brownfield-tests** — Only run if coverage < 30% AND risk > 50:
   - Run `wednesday-skills gen-tests --file <module>`
   - Show generated test file to dev for review before writing

## Never
- Recommend refactoring a critical file (risk > 80) without flagging the blast radius
- Read raw source to answer structural questions — use graph only
- Auto-write test files without showing the dev first

More from wednesday-solutions/ai-agent-skills

SkillDescription
brownfield-driftEnforces architecture boundaries defined in PLAN.md. Use when a PR crosses module/service boundaries, when the dev asks "are we following the architecture?", or as a scheduled architecture health check. Not for querying what a module does — use brownfield-chat for that.
codebase-intelUnified codebase intelligence. Handles all questions about structure, logic, risk, and dependencies. Combines natural-language Q&A with deterministic lookups and pre-edit blast radius checks.
deploy-checklistPre-deploy and post-deploy checklist skill. Ensures env vars, migrations, CI, rollback plan, smoke tests, and monitoring are verified before and after every deployment.
greenfieldParallel persona planning for new projects. Research agent runs first to build domain context, then Architect, PM, and Security agents run in parallel. Synthesis agent combines all perspectives into a detailed GSD-style PLAN.md with Tensions section.
onboard-dev-agentUse when a dev is new to the project, asks for an overview, or wants to get oriented quickly. Fills graph gaps then runs a guided codebase interview.
pr-review-agentFull PR review orchestrator. Use when asked to review a PR or check if it is ready to merge. Runs blast radius + drift check on changed files, then hands off to pr-review for comment triage and fixes. Do NOT use pr-review directly for full reviews — use this.
standards-kitUnified development and design standards. Enforces code quality (complexity < 8), strict naming conventions, and the mandatory use of approved UI component libraries.
wednesday-gitUnified Git workflow. Manages the entire task lifecycle: branch creation (sprint), atomic commits (git-os), and PR opening (pr-create).