ln-628-concurrency-auditor

Audit codebases for async races, thread safety violations, and deadlocks.

Updated Mar 14, 2026
One-click install
npx skills add https://github.com/0xtaoist/taogate --skill ln-628-concurrency-auditor-0xtaoist
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: ln-628-concurrency-auditor
Source: https://github.com/0xtaoist/taogate/tree/main/ln-628-concurrency-auditor
Command: npx skills add https://github.com/0xtaoist/taogate --skill ln-628-concurrency-auditor-0xtaoist

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Audits codebases for concurrency issues across async boundaries, threading, and cross-process resource access to prevent race conditions, TOCTOU, and deadlocks.

Core Features & Use Cases

  • Two-layer detection: Grep-style candidate discovery followed by contextual reasoning to confirm findings.
  • 7 checks: async races, thread safety, TOCTOU, deadlocks, blocking I/O, resource contention, cross-process races.
  • Automates scoring and report generation to integrate with the ln-620 coordination pipeline and produce deterministic 628-concurrency.md reports.

Quick Start

Run the concurrency auditor against a target codebase to generate the 628-concurrency.md report in the configured output directory.

Frequently Asked Questions about ln-628-concurrency-auditor

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit my codebase for race conditions and deadlocks?▼

To audit for race conditions and deadlocks, this tool performs two-layer detection by scanning for pattern-based candidates and applying context-aware reasoning to confirm thread safety and concurrency issues across your codebase.

What is a TOCTOU vulnerability and how is it detected in asynchronous code?▼

A TOCTOU vulnerability is a time-of-check to time-of-use race condition. This tool detects TOCTOU in asynchronous code through contextual reasoning applied after initial pattern-based candidate discovery across supported languages.

Can I check for thread safety violations in JavaScript, Python, Go, and Java?▼

Yes, you can check for thread safety violations across JavaScript, Python, Go, and Java. The auditor scopes multi-threaded and asynchronous environments in these languages to identify cross-process races and blocking I/O.

What's the best way to generate a deterministic concurrency report?▼

The best way to generate a deterministic concurrency report is to run this auditor, which automates scoring and writes a fixed 628-concurrency.md report to your specified output directory.

How does static analysis find async race conditions without running the code?▼

Static analysis finds async races without execution by parsing code context to discover grep-style candidates, then applying context-aware checks to score and confirm concurrency findings deterministically.

Does the concurrency auditor require any dependencies to scan for resource contention?▼

No dependencies are required to scan for resource contention. The auditor operates independently using its internal two-layer detection approach to identify cross-process races and blocking I/O.