All skills
paulrberg avatar

/code-polish

@ccfca26
by Paul Bergpaulrberg/agent-skills94 stars
7

Polish changed code when the user explicitly asks, or when an active workflow requests post-implementation simplification and risk-profiled review over a fixed file scope.

Use this Skill: https://skilld.dev/gh/paulrberg/agent-skills/code-polish

This session only. Nothing lands on disk.

referencesprofilesconfiguration.md

≈217 tokens on demand. Your agent reads this file only when SKILL.md points to it.

Configuration Profile

Load when the diff touches config, infra limits, or rollout controls.

Checks

  • CFG-001 High-magnitude change (HIGH): significant value shift without baseline or justification.
  • CFG-002 Timeout/retry inversion (HIGH): upstream/downstream timeout or retry hierarchy causes cascading failures.
  • CFG-003 Pool/limit mismatch (HIGH): connection/thread/concurrency limits can starve or overload dependencies.
  • CFG-004 Env drift (MEDIUM): prod values copied blindly from dev/staging without proportional scaling.
  • CFG-005 Rollback gap (MEDIUM): risky change lacks an available rollback or rollout-control strategy.
  • CFG-006 Observability gap (MEDIUM): no metric/alert to validate the change safely.

Evidence Expectations

  • Compare new values against previous values.
  • Call out concrete failure mode under load.

Source: SKILL.md on GitHub

1 warningtoday5 checks · Risk SAFE
  • Gen Agent Trust Hubtoday

    The skill is a code analysis and simplification tool that operates on local Git repositories. It uses various language-specific profiles to identify defects and suggest improvements. The primary security consideration is that the skill processes untrusted code changes and possesses the capability to execute shell commands (e.g., tests, linters, and formatters), making it a potential target for indirect prompt injection where malicious instructions in the code could influence the agent's behavior.

  • Sockettoday

    No alerts

  • Snyktoday

    Risk: LOW · No issues

  • Runlayer7mo

    1/1 file flagged

  • ZeroLeaks5mo

    1 finding · Score: 86/100

Signed by skilld at ccfca26. This ties the file your Agent reads to that commit on GitHub. It does not review the instructions.

Last checked against GitHub yesterday.

Activeupdated last week
argument-hint
[paths] [--simplify] [--review] [--with-profile <name>] [--skip-profile <name>]

README badge

README badge for paulrberg/agent-skills/code-polish