Skill definition
hi-tech-build-audit
Audit a repository's technology stack, build system, dependency management, CI/CD pipelines, deployment targets, and platform assumptions. Use for build onboarding, migration readiness, deployment review, or CI/CD documentation.
SKILL.md
Technology and Build Audit
Read shared/leaf-contract.md. Produce verified build and deployment evidence. Do not own module reconnaissance or cross-artifact synthesis.
Inputs
Require a readable absolute repo_root. Accept target_env: local, container, cloud, hybrid, or auto (default). Accept depth: quick, standard (default), or deep. Default output to discovery-output/audit-data.
Workflow
- Validate input and output boundaries.
- Use retrieval rules in audit-checklist.md and shared/retrieval-protocol.md. Discover callable metadata; fast-fail unavailable layers once.
- Inventory languages, runtimes, frameworks, package managers, build systems, dependency locks, generated code, and version constraints.
- Verify build, test, lint, packaging, and local-run commands from files. Label convention-inferred commands; never present them as verified.
- Inspect CI/CD triggers, jobs, gates, artifacts, secrets references, environments, and deployment targets.
- For
deep, trace API-layer and runtime dependencies only where graph/source evidence establishes them. - Redact values of secrets and
.enventries while preserving key names and evidence locations. - Write artifacts per output-contract.md and validate required outputs.
Outputs
build-report.md,tech-stack.json,ci-cd-pipelines.md, andartifact-manifest.json— required.platform-targets.md— when deployment targets detected.api-dependencies.md— whendepth=deep.
Complete only when each claimed command or technology cites repository evidence, required artifacts validate, detected/absent/unknown are distinct, and the manifest reflects partial or blocked evidence honestly.
Return a prerequisite or evidence-gap result to the root when another capability is needed.
Continue exploring