Git Gh Pat Auth
NEventStore/NEventStore
A skill your agent uses when: authenticating git and GitHub CLI for NEventStore tasks, fixing gh auth errors, setting PAT environment variables, preparing a shell session for git push and gh issue…
Deep analysis of Git history: identify frequently changed hotspot files, analyze code ownership by contributor, and scan for leaked secrets.
Install Repo Audit
$ npx skills add zebbern/claude-code-guide --skill repo-audit -a claude-codeProject install by default; add -g for ~/.claude/skills/.
$ gh skill install zebbern/claude-code-guide repo-audit --agent claude-codeProject scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).
$ git clone --depth 1 https://github.com/zebbern/claude-code-guide.git skills-src && mkdir -p .claude/skills && cp -r skills-src/skills/repo-audit .claude/skills/repo-audit && rm -rf skills-srcUse ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.
Claude Code skills documentation · loads skills from .claude/skills/
Install the "repo-audit" agent skill from https://github.com/zebbern/claude-code-guide/tree/main/skills/repo-audit into .claude/skills/repo-audit/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "repo-audit", then confirm the skill loads.Claude Code copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$skill-installer install https://github.com/zebbern/claude-code-guide/tree/main/skills/repo-auditType this inside Codex. $skill-installer <name> installs a curated skill from openai/skills. The installer writes to $CODEX_HOME/skills (default ~/.codex/skills). Restart Codex if the skill does not show up.
$ npx skills add zebbern/claude-code-guide --skill repo-audit -a codexProject install goes to .agents/skills/; add -g for ~/.codex/skills/.
$ gh skill install zebbern/claude-code-guide repo-audit --agent codexProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/zebbern/claude-code-guide.git skills-src && mkdir -p .agents/skills && cp -r skills-src/skills/repo-audit .agents/skills/repo-audit && rm -rf skills-srcUse ~/.agents/skills/ instead of .agents/skills for a personal install.
Codex skills documentation · loads skills from .agents/skills/
Install the "repo-audit" agent skill from https://github.com/zebbern/claude-code-guide/tree/main/skills/repo-audit into .agents/skills/repo-audit/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "repo-audit", then confirm the skill loads.Codex copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add zebbern/claude-code-guide --skill repo-audit -a cursorProject install goes to .agents/skills/; add -g for ~/.cursor/skills/.
$ gh skill install zebbern/claude-code-guide repo-audit --agent cursorProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/zebbern/claude-code-guide.git skills-src && mkdir -p .cursor/skills && cp -r skills-src/skills/repo-audit .cursor/skills/repo-audit && rm -rf skills-srcUse ~/.cursor/skills/ instead of .cursor/skills for a personal install.
Cursor skills documentation · loads skills from .cursor/skills/, .agents/skills/, .claude/skills/, .codex/skills/
Install the "repo-audit" agent skill from https://github.com/zebbern/claude-code-guide/tree/main/skills/repo-audit into .cursor/skills/repo-audit/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "repo-audit", then confirm the skill loads.Cursor copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gemini skills install https://github.com/zebbern/claude-code-guide.git --path skills/repo-audit--scope user (default) or --scope workspace; --path is the subfolder of the repo that holds the skill; --consent skips the security confirmation prompt.
$ npx skills add zebbern/claude-code-guide --skill repo-audit -a gemini-cliProject install goes to .agents/skills/; add -g for ~/.gemini/skills/.
$ gh skill install zebbern/claude-code-guide repo-audit --agent gemini-cliProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/zebbern/claude-code-guide.git skills-src && mkdir -p .gemini/skills && cp -r skills-src/skills/repo-audit .gemini/skills/repo-audit && rm -rf skills-srcUse ~/.gemini/skills/ instead of .gemini/skills for a personal install, then run /skills reload.
Gemini CLI skills documentation · loads skills from .gemini/skills/, .agents/skills/
Install the "repo-audit" agent skill from https://github.com/zebbern/claude-code-guide/tree/main/skills/repo-audit into .gemini/skills/repo-audit/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "repo-audit", then confirm the skill loads.Gemini CLI copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gh skill install zebbern/claude-code-guide repo-auditInstalls for Copilot at project scope by default; add --scope user for a personal install. Preview a skill first with gh skill preview. Needs GitHub CLI 2.90.0 or later (public preview).
$ npx skills add zebbern/claude-code-guide --skill repo-audit -a github-copilotProject install goes to .agents/skills/; add -g for ~/.copilot/skills/.
$ git clone --depth 1 https://github.com/zebbern/claude-code-guide.git skills-src && mkdir -p .github/skills && cp -r skills-src/skills/repo-audit .github/skills/repo-audit && rm -rf skills-srcUse ~/.copilot/skills/ instead of .github/skills for a personal install. Commit .github/skills so cloud agent and code review can use it.
GitHub Copilot skills documentation · loads skills from .github/skills/, .claude/skills/, .agents/skills/
Install the "repo-audit" agent skill from https://github.com/zebbern/claude-code-guide/tree/main/skills/repo-audit into .github/skills/repo-audit/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "repo-audit", then confirm the skill loads.GitHub Copilot copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add zebbern/claude-code-guide --skill repo-audit -a opencodeOpenCode documents no install command of its own. Project install goes to .agents/skills/; add -g for ~/.config/opencode/skills/.
$ gh skill install zebbern/claude-code-guide repo-audit --agent opencodeProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/zebbern/claude-code-guide.git skills-src && mkdir -p .opencode/skills && cp -r skills-src/skills/repo-audit .opencode/skills/repo-audit && rm -rf skills-srcUse ~/.config/opencode/skills/ instead of .opencode/skills for a personal install.
OpenCode skills documentation · loads skills from .opencode/skills/, .claude/skills/, .agents/skills/
Install the "repo-audit" agent skill from https://github.com/zebbern/claude-code-guide/tree/main/skills/repo-audit into .opencode/skills/repo-audit/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "repo-audit", then confirm the skill loads.OpenCode copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
Facts
- Skill name
repo-audit- GitHub stars
- 4.7k
- Token cost
- ~831 tokens
- SKILL.md length
- 322 words
- Files
- 5 (incl. scripts)
- Skills in repo
- 46
- Repo updated
- First seen
- Licence
- MIT
At a glance
Deep analysis of Git history: identify frequently changed hotspot files, analyze code ownership by contributor, and scan for leaked secrets.
- Works in 3 steps: Hotspot File Analysis… → Code Ownership Analysis… → Secret Leak Scanning…
- Tasks that involve Git workflow
- SKILL.md covers Feature Overview, Use Cases and Dependencies
- Runs Shell scripts from its folder; calls bash
What it does
Repo Audit is an agent skill from zebbern/claude-code-guide. Deep analysis of Git history: identify frequently changed hotspot files, analyze code ownership by contributor, and scan for leaked secrets. Triggered when users ask about Git analysis, code hotspots, who owns what code, secret scanning, security audits of commit history, or optimizing code review assignments.
Its SKILL.md is about 830 tokens, which your agent loads only when the skill is triggered. The skill folder holds 5 other files, including scripts (for example `scripts/hotfiles.sh`, `scripts/ownership.sh` and `scripts/secret-scan.sh`).
It sits in Development, covering Git workflow, Secrets management and Security review. It works with Git. The repository describes itself as: Claude Code Guide - Setup, Commands, workflows, agents, skills & tips-n-tricks from beginner to power user! The licence is MIT.
When your agent uses it
- Tasks that involve Git workflow
- Tasks that involve Secrets management
- Tasks that involve Security review
Example prompts
- “/repo-audit”
Requirements
- A Bash shell
Workflow steps
3 steps, taken from the step headings in SKILL.md.
What it can do on your machine
Read from SKILL.md and the folder at commit 7ff9fbb. It shows what the files ask for, not the result of running them.
Tool permissions
Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.
From allowed-tools in the SKILL.md frontmatter.
Runs code
Ships 3 files in scripts/ (Shell), which the agent can run.
Shell commands in SKILL.md call:
bash
From the folder's file list and the shell code blocks in SKILL.md.
Network
No URLs in SKILL.md.
From URLs in SKILL.md, links to its own repository left out.
Credentials
Names no API keys, tokens, secrets or passwords.
From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.
Context cost
Repo Audit loads about 831 tokens when it runs. Until then it costs about 81 tokens; SKILL.md has 322 words of instructions outside code blocks.
Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.
Safety
Auto-check passed
The automated check found no risky patterns in SKILL.md.
Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); the scripts in this folder are not scanned.
SKILL.md
The full file from zebbern/claude-code-guide at commit 7ff9fbb, republished under its MIT licence (© zebbern). 322 words, ~831 tokens.
Download SKILL.mdSave it as
.claude/skills/repo-audit/SKILL.md (or your agent's skills folder). This skill also uses 4 other files; get the full folder from GitHub.- name
- repo-audit
- description
- Deep analysis of Git history: identify frequently changed hotspot files, analyze code ownership by contributor, and scan for leaked secrets. Triggered when users ask about Git analysis, code hotspots, who owns what code, secret scanning, security audits of commit history, or optimizing code review assignments.
- type
- tool
- license
- MIT
- tags
- git, security, analysis, devops
Repo Audit — Deep Analysis of Git History
Perform three-dimensional analysis on a Git repository: hotspot file detection, code ownership analysis, and secret leak scanning.
Feature Overview
1. Hotspot File Analysis (scripts/hotfiles.sh)
Identify the most frequently changed files in a repository to help spot:
- High-risk code areas (frequent changes = potential instability)
- Files that deserve extra attention during code review
- Modules that may need splitting or refactoring
Usage:
bash scripts/hotfiles.sh [options]| Option | Description | Default |
|---|---|---|
--repo PATH | Repository path | Current directory |
--top N | Show top N files | 20 |
--since DATE | Start date (e.g. 2024-01-01) | None |
--until DATE | End date | None |
--author AUTHOR | Filter by author | None |
--format FORMAT | Output format: table / csv / json | table |
2. Code Ownership Analysis (scripts/ownership.sh)
Analyze actual code ownership, reporting for each contributor within the specified scope:
- Commit count and percentage
- Lines changed (additions/deletions)
- Last active date
Usage:
bash scripts/ownership.sh [options]| Option | Description | Default |
|---|---|---|
--repo PATH | Repository path | Current directory |
--path SUBPATH | Analyze a specific subdirectory or file | Entire repo |
--top N | Show top N contributors | 10 |
--since DATE | Start date | None |
--format FORMAT | Output format: table / csv / json | table |
3. Secret Leak Scanning (scripts/secret-scan.sh)
Scan the full Git history (including deleted commits) for common secrets and sensitive information:
- AWS Access Key / Secret Key
- GitHub / GitLab / Slack Tokens
- SSH Private Keys
- Generic API Keys, passwords, and secret patterns
Usage:
bash scripts/secret-scan.sh [options]| Option | Description | Default |
|---|---|---|
--repo PATH | Repository path | Current directory |
--branch BRANCH | Scan a specific branch | All branches |
--since DATE | Start date | None |
--format FORMAT | Output format: table / csv / json | table |
--severity LEVEL | Minimum severity level: low / medium / high | low |
Use Cases
- Security audits: Scan history for leaked secrets before deploying to production
- Code review optimization: Identify hotspot files and prioritize reviewing high-risk areas
- Team collaboration: Understand who knows which parts of the code best, and assign reviews accordingly
- Tech debt assessment: Frequently changed files are strong candidates for refactoring
Dependencies
git(>= 2.20)bash(>= 4.0)- Standard Unix utilities:
awk,sort,head,grep
No additional dependencies or paid APIs required.
© zebbern, MIT. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file
Files
SKILL.md and 4 other files (scripts) in skills/repo-audit of zebbern/claude-code-guide.
- SKILL.md
- LICENSE
- scripts/hotfiles.sh
- scripts/ownership.sh
- scripts/secret-scan.sh
Open the folder on GitHubat commit 7ff9fbb
Compare with similar skills
Repo Audit next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.
| Skill | Stars | Used in | Tokens | Auto-check | Licence | Repo updated |
|---|---|---|---|---|---|---|
| Repo Audit this skillzebbern/claude-code-guide | 4.7k | — | ~831 | Automated safety check: Pass | MIT | |
| Git Gh Pat AuthNEventStore/NEventStore | 1.6k | — | ~828 | Automated safety check: Pass | MIT | |
| Memstack Security Git Guardcwinvestments/memstack | 423 | — | ~3.1k | Automated safety check: Notes | MIT | |
| Openai Security Ownership Maptrailofbits/skills-curated | 513 | 5 repos | ~2.2k | Automated safety check: Notes | CC-BY-SA-4.0 | |
| Yao Workspace Git ConfigYaoApp/yao | 8.1k | — | ~712 | Automated safety check: Pass | Custom licence | |
| Repo SentinelMathews-Tom/armory | 329 | — | ~2.2k | Automated safety check: Pass | MIT |
Similar skills
Memstack Security Git Guard
cwinvestments/memstack
A skill your agent uses when the user says 'git-guard', 'check git protection', 'is this repo protected', 'verify gitleaks', 'set up git hooks', 'install git-guard', or wants to confirm a repo…
- Official
Openai Security Ownership Map
trailofbits/skills-curated
Analyze git repositories to build a security ownership topology (people-to-file), compute bus factor and sensitive-code ownership, and export CSV/JSON for graph databases and visualization.
Yao Workspace Git Config
YaoApp/yao
Manages Git identity, HTTPS access tokens and SSH keys at the workspace level through three `tai tool` commands, each with a get, set, list, import or delete action.
Repo Sentinel
Mathews-Tom/armory
Full security audit for public repositories across 12 attack surfaces: git history, secrets, CI/CD, containers, dependencies, licenses.
Release
312362115/claude
发版自动化技能：CalVer 版本号 + 从 git log 生成 changelog + GitHub Releases。
More from zebbern/claude-code-guide
All 46 skills in this repoLocalization Toolkit
zebbern/claude-code-guide
This skill should be used when setting up, auditing, or enforcing internationalization/localization in UI codebases (React/TS, i18next or similar, JSON locales), including installing/configuring the…
Audit Flow
zebbern/claude-code-guide
Interactive system flow tracing across CODE, API, AUTH, DATA, NETWORK layers with SQLite persistence and Mermaid export.
Chart Image
zebbern/claude-code-guide
Generate publication-quality PNG chart images from data, supporting line, bar, area, candlestick, pie, and heatmap charts.
Code To Diagram
zebbern/claude-code-guide
Analyze codebases and automatically generate architecture diagrams, flowcharts, and org charts.
Code Vuln Audit
zebbern/claude-code-guide
Scan code for security issues: dependency vulnerabilities (npm/pip audit), secret leaks (regex and entropy analysis), and OWASP anti-patterns like SQL injection, XSS, or command injection.
Idor Testing
zebbern/claude-code-guide
This skill should be used when the user asks to "test for insecure direct object references," "find IDOR vulnerabilities," "exploit broken access control," "enumerate user IDs or object references,"…
Related
Works with
Categories
Questions about Repo Audit
What does Repo Audit do?
Deep analysis of Git history: identify frequently changed hotspot files, analyze code ownership by contributor, and scan for leaked secrets. Repo Audit is an agent skill from zebbern/claude-code-guide. Deep analysis of Git history: identify frequently changed hotspot files, analyze code ownership by contributor, and scan for leaked secrets.
When should I use Repo Audit?
Repo Audit fits situations like: tasks that involve Git workflow; tasks that involve Secrets management; tasks that involve Security review.
How do I install Repo Audit in Claude Code?
Run `npx skills add zebbern/claude-code-guide --skill repo-audit -a claude-code`. Or copy the skill folder (skills/repo-audit in zebbern/claude-code-guide) into .claude/skills/repo-audit in your project. Claude Code loads it when a task matches its description.
How do I install Repo Audit in Codex?
Run `npx skills add zebbern/claude-code-guide --skill repo-audit -a codex`. Or copy the skill folder (skills/repo-audit in zebbern/claude-code-guide) into .agents/skills/repo-audit in your project. Codex loads it when a task matches its description.
Can I use Repo Audit in Cursor, Gemini CLI or GitHub Copilot?
Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add zebbern/claude-code-guide --skill repo-audit -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/repo-audit, .gemini/skills/repo-audit, .github/skills/repo-audit and .opencode/skills/repo-audit in your project.
What does Repo Audit need to run?
Going by SKILL.md and its folder, Repo Audit needs a shell for the scripts in its folder and the command-line tools its instructions call (bash). Our summary lists: A Bash shell.
Does Repo Audit access the network?
SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.
Is Repo Audit safe to install?
Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. The check reads SKILL.md only: the scripts in the folder are not scanned, so read them before running anything.
What licence does Repo Audit use?
Repo Audit is published under the MIT licence (declared in SKILL.md). It allows redistribution, so the full SKILL.md is shown on this page.
How many tokens does Repo Audit use?
About 831 tokens (SKILL.md is roughly 3.3k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.
What are the alternatives to Repo Audit?
Skills that share tags, products or a category with Repo Audit: Git Gh Pat Auth (NEventStore/NEventStore, 1.6k stars), Memstack Security Git Guard (cwinvestments/memstack, 423 stars), Openai Security Ownership Map (trailofbits/skills-curated, 513 stars) and Yao Workspace Git Config (YaoApp/yao, 8.1k stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.
Who maintains Repo Audit?
zebbern (a GitHub user) maintains it in zebbern/claude-code-guide, which has 4,650 GitHub stars. The repository holds 46 skills in this directory. The repository was last updated on October 10, 2026.
Source: zebbern/claude-code-guide on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.