Health Check

Full codebase diagnostic: typecheck, tests, security scans, dead code, circular deps, package health. Reports a summary table.

This skill is headless. Run each step as a single Bash command, capture the exit code and key output lines, then print the summary table. Do NOT analyze output, suggest fixes, or spawn agents. Just report what passed and what failed.

Steps

Run all steps. Capture exit code and summary line from each. Do NOT stop on failure — run everything and report at the end.

1. Type Check (all workspaces)

npx tsc --noEmit 2>&1; echo "EXIT:$?"

Run for each workspace in the project. Capture exit code + error count.

2. Full Test Suite

npx vitest run --reporter=dot 2>&1; echo "EXIT:$?"

Use dot reporter to minimize output. Capture exit code + pass/fail counts.

3. Lint

npx eslint . 2>&1; echo "EXIT:$?"

Capture exit code + error/warning counts.

4. Semgrep Security Scan

semgrep scan --config auto --severity ERROR --severity WARNING --quiet 2>&1; echo "EXIT:$?"

If semgrep is not installed, record as SKIP.

5. Circular Dependency Check

npx madge --circular --ts-config tsconfig.json src/ 2>&1; echo "EXIT:$?"

Capture exit code + cycle count. Record FAIL if any cycles found.

6. Dead Code / Unused Exports

npx knip --no-progress 2>&1; echo "EXIT:$?"

Record WARN (not FAIL) — knip can be noisy on first run.

7. Dependency Vulnerabilities

npm audit --production 2>&1; echo "EXIT:$?"

Or pnpm audit --prod for pnpm projects. Record WARN for low/moderate, FAIL for high/critical.

Summary Table

After all steps complete, print:

## Health Check Results

| Gate         | Status | Details                          |
|--------------|--------|----------------------------------|
| TypeCheck    | PASS   | 0 errors                         |
| Tests        | PASS   | 1200 passed, 0 failed            |
| Lint         | PASS   | 0 errors, 3 warnings             |
| Semgrep      | PASS   | 0 findings                       |
| Circular     | PASS   | 0 circular dependencies          |
| Dead Code    | WARN   | 3 unused exports                 |
| Audit        | PASS   | 0 vulnerabilities                |

Status values: PASS, FAIL, SKIP (tool not installed), WARN (non-zero findings but non-blocking).

That's it. Do not suggest fixes, do not analyze errors, do not read files. Just print the table.

Arguments

• $ARGUMENTS: Optional flags:
  • --quick: Skip Semgrep + knip (saves time)
  • --security-only: Only Semgrep + audit
  • --code-quality: Only knip + madge + typecheck (skip security + tests)
  • If empty: Run all gates

Customization

Add project-specific gates by extending the steps list. Common additions:

• OpenAPI lint: npx spectral lint openapi.json
• Bundle size check: npx bundlesize
• Package exports: npx publint && npx attw --pack
• Secret scanning: trufflehog git "file://$(pwd)" --only-verified