code-scorecard

Audit codebases across nine dimensions and produce per-ecosystem scores with JSON evidence.

11|7|Updated Apr 2, 2026
One-click install
npx skills add https://github.com/sean-m-cooper/ai_tools --skill code-scorecard
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: code-scorecard
Source: https://github.com/sean-m-cooper/ai_tools/tree/main/skills/code-scorecard
Command: npx skills add https://github.com/sean-m-cooper/ai_tools --skill code-scorecard

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Audits a codebase across nine quality dimensions and produces a clear, actionable scorecard with deterministic evidence when available, reducing guesswork in code reviews, security assessments, and due-diligence.

Core Features & Use Cases

  • Nine-dimension scoring: Provides scores across architecture, code quality, testing, security, error handling, documentation, dependency management, performance, and maintainability.
  • Deterministic evidence-first approach: Uses CodeMetrics.AI outputs as authoritative evidence for deterministic dimensions and falls back to qualitative assessment guided by defined anchors when evidence is missing.
  • Use Case: pre-release health checks, security audits, vendor due-diligence, and ongoing health monitoring of long-lived codebases.

Quick Start

Run the scorecard against your repository entry point (such as a solution file or root package.json) to generate per-dimension scores and a JSON evidence file.

Frequently Asked Questions about code-scorecard

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I generate a code quality scorecard for a polyglot repository?▼

To generate a code quality scorecard for a polyglot repository, audit the codebase across nine dimensions and present per-ecosystem results with a unified suite summary. Score detected ecosystems like dotnet and javascript-typescript separately using deterministic JSON evidence.

What dimensions are evaluated during an automated codebase audit?▼

An automated codebase audit evaluates nine dimensions: architecture, code quality, testing, security, error handling, documentation, dependency management, performance, and maintainability. Each dimension receives a 0–10 score backed by deterministic JSON evidence or qualitative assessment.

How does deterministic code scoring work when evidence is missing?▼

Deterministic code scoring uses CodeMetrics.AI outputs as authoritative evidence when available. If deterministic evidence is missing or incompatible, it falls back to qualitative scoring against published anchors and uses ecosystem-specific thresholds to derive final scores.

Can I use code scorecard metrics for vendor due-diligence and security audits?▼

Yes, you can use code scorecard metrics for vendor due-diligence and security audits. The scorecard reduces guesswork by auditing a codebase across nine quality dimensions and producing clear, actionable scores backed by deterministic evidence.

What is the best way to run a pre-release health check on a long-lived codebase?▼

The best way to run a pre-release health check on a long-lived codebase is to run an audit across nine quality dimensions, generating a 0–10 score per dimension. This produces an actionable scorecard with deterministic JSON evidence for ongoing health monitoring.