R

Repo Audit

conor-bronsdon/repo-audit · v0.1.0 · Development & Workflow

by Conor BronsdonOwner verifiedcaution

Agent Skill that checks whether a repository's README matches its code and whether stated rules are actually enforced, with an opt-in open-source launch workflow

InstallSourceFollow0
Trust Score60Security59Surfaces2

Is Repo Audit a fit?

From the plugin's manifest and HOL's scan. Anything the plugin does not declare is shown as not declared.

Works with

  • Codex
  • 2 skills

Before you install

Sign-in
Not declared
Declared access
Read, Write
License
Apache-2.0

Check before relying on it

What is Repo Audit?

Repo Audit is a published development & workflow plugin for AI coding agents in the codex ecosystem, developed by Conor Bronsdon and distributed through the HOL AI plugin registry. Agent Skill that checks whether a repository's README matches its code and whether stated rules are actually enforced, with an opt-in open-source launch workflow

Canonical slug
conor-bronsdon/repo-audit
Version
v0.1.0 · updated Sep 24, 2026

Trust & Reputation

HOL Trust Score
60

Factor Analysis

Per-metric points (0–100 each) combined via a weighted average into the overall score.

Installability
64pts
Maintenance
55pts
MCP Posture
100pts
Plugin Security
59pts
Provenance
70pts
Publisher Quality
75pts

Registry Snapshot

Project link
Repo Audit
Publisher verification
No
Marketplace source
Unknown
Scanner
Broker fallback
Security result
Caution
Digest verified
Yes
2 bundled skills — copy or download SKILL.mdOpen skills

Trust & reputation

Trust & Reputation

HOL Trust Score
60

Factor Analysis

Per-metric points (0–100 each) combined via a weighted average into the overall score.

Installability
64pts
Maintenance
55pts
MCP Posture
100pts
Plugin Security
59pts
Provenance
70pts
Publisher Quality
75pts

Provenance

Plugin root
.
Source repo
https://github.com/conorbronsdon/repo-audit
Source commit
dd14bb6d2e3a…
Publisher verified
No
Owner verified
@conorbronsdon

Continuous scanner CI not detected

This plugin remains listed. Its overall trust score is reduced by 10% because security checks are not maintained in the source repository's CI.

Optional: maintain the scanner in the source repository's CI to receive the full trust score. Listing does not require that change.

README badge not detected

Plugin owners can add the HOL badge to the repository README from Guard Plugins. Distribution, not security evidence. It adds a 2% engagement adjustment to the overall trust score and never changes the security result.

Security Posture

See how the Trust Score is computed
Caution
Security result
59
Security score
0
High findings
Provider
registry-broker-fallback
Grade
F · caution
Version
Unknown
cisco-skill-scanner: unknown

Findings

mediumpublishabilitypublishability.link.missing.websiteURL

websiteURL should be present for marketplace readiness.

mediumpublishabilitypublishability.link.missing.privacyPolicyURL

privacyPolicyURL should be present for marketplace readiness.

mediumpublishabilitypublishability.link.missing.termsOfServiceURL

termsOfServiceURL should be present for marketplace readiness.

lowoperational-securitysupply-chain.lockfile-missing

Repository snapshot does not include a lockfile.

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

infoskill-securityskill-scan.unavailable

Cisco skill scanner timed out after 60000 ms

Repo Audit — Frequently asked questions

What is Repo Audit?
Repo Audit is an AI plugin in the HOL registry. Agent Skill that checks whether a repository's README matches its code and whether stated rules are actually enforced, with an opt-in open-source launch workflow
How do I install Repo Audit?
Install Repo Audit in your harness: Codex — codex plugin marketplace add conorbronsdon/repo-audit; Any agent — npx [email protected] add conorbronsdon/repo-audit. Full step-by-step guidance is on the HOL plugin page.
How do I install Repo Audit in Codex?
To install Repo Audit in Codex, start with codex plugin marketplace add conorbronsdon/repo-audit. The complete step-by-step install guide for Codex is on the HOL plugin page.
Is Repo Audit free?
Pricing for Repo Audit is published on its HOL plugin page when the maker schedules a launch.
How is the Trust Score for Repo Audit computed?
Repo Audit has a HOL Trust Score of 60 out of 100. The score is a weighted sum of six components from a static scan of the source, capped for high-severity findings and adjusted by two disclosed policies. Memberships and payments are not inputs, and a scan is not a safety guarantee. Full breakdown: https://hol.org/registry/plugins/conor-bronsdon%2Frepo-audit/trust
Who publishes Repo Audit?
Repo Audit is published by Conor Bronsdon and listed on HOL.
Is Repo Audit available now?
Repo Audit availability is listed on its HOL plugin page.

Install Guidance

Install in Codex

Install through the Codex CLI plugin marketplace.

Codex plugin docs

Optional: install HOL Guard for Codex first, so it can check this plugin's tools on your machine before Codex uses them.

  1. 1

    Register the marketplace

    Run in any terminal. Codex reads the marketplace entry from .agents/plugins/marketplace.json (or the legacy .claude-plugin path) in the repository. If the repository ships none, add the generated entry from the Advanced section below first.

    shell
  2. 2

    Install from the Plugins browser

    Open Codex, open the Plugins browser, choose the marketplace registered by the previous command, and install repo-audit.

  3. 3

    Check the marketplace is registered

    This confirms the marketplace source only. Confirm the plugin itself is enabled in the Plugins browser before relying on it.

    shell

Did setup work in Codex?

No setup reports for Codex yet. Self-reported by signed-in visitors. Copying a command is not counted, and most installs are never reported.

Attested installs: Fewer than 10 attested installs of this plugin in week 2026-W43, so no number is shown. Counted from opt-in HOL Guard install reports, once per machine and runtime, and never mixed with the answers above. How install reports work.

Loading reviews

Plugin Manifest

{
  "name": "repo-audit",
  "version": "0.1.0",
  "description": "Audit repository claims and plan an open-source release.",
  "author": {
    "name": "Conor Bronsdon",
    "url": "https://github.com/conorbronsdon"
  },
  "homepage": "https://github.com/conorbronsdon/repo-audit",
  "repository": "https://github.com/conorbronsdon/repo-audit",
  "license": "Apache-2.0",
  "keywords": [
    "repo-audit",
    "documentation"
  ],
  "skills": "./",
  "interface": {
    "displayName": "Repo Audit",
    "developerName": "Conor Bronsdon",
    "shortDescription": "Audit repository claims and plan an open-source release.",
    "longDescription": "Audit repository claims and plan an open-source release. Uses the repository's canonical skill instructions and bundled resources.",
    "category": "Developer Tools",
    "capabilities": [
      "Read",
      "Write"
    ],
    "defaultPrompt": [
      "Audit this repository against its own code."
    ]
  },
  "registryIndexVersion": 5
}

Marketplace Source

Repo URL
https://github.com/conorbronsdon/repo-audit
Marketplace path
Unknown
Source path
.
Install policy
Unspecified

Skills

2 SKILL.md files ship with this plugin. Preview, copy, or download each one, then install them with the Skills CLI.

Share
skills-cli

  • repo-audit

    SKILL.md

    Audit a repository or prepare it for an open-source release. Audit mode reports whether the README matches the code and whether stated rules are actually enforced; launch mode walks a repo to release-ready with opt-in checklist packs and README templates. Use when asked to "audit this repo," "is this repo ready to go public," "prepare this repo for release," "open-source this," "get this ready to publish," "check this README," or "what's missing before I launch this." Reports by default; writes only when explicitly asked.

    Raw SKILL.md

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

  • repo-audit

    skills/repo-audit/SKILL.md

    Audit repository claims and plan an open-source release. Use when asked to audit a repository or prepare an open-source release.

    Raw SKILL.md

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

File Inventory

.codex-plugin/plugin.json

plugin-manifest

836 bytes

e2c8c65dde4312d5…

.github/FUNDING.yml

file

53 bytes

eb502f724bf3f050…

.github/ISSUE_TEMPLATE/bug.yml

file

945 bytes

c07b546ded322706…

.github/ISSUE_TEMPLATE/config.yml

file

177 bytes

6f38605419e2f435…

.github/ISSUE_TEMPLATE/feature.yml

file

697 bytes

5f521474894e4746…

.github/PULL_REQUEST_TEMPLATE.md

file

437 bytes

c4c2b7366ca843f0…

AGENTS.md

file

3,304 bytes

a52596c490f1c748…

CHANGELOG.md

file

7,383 bytes

20d37ce321319a0f…

checklists/agent-readiness.md

file

791 bytes

d7f5543d051b0fb2…

checklists/core.md

file

3,078 bytes

b15d1e378c11c086…

checklists/distribution.md

file

1,436 bytes

0606de9950e9e44f…

checklists/modules/evidence-grading.md

file

2,348 bytes

bfcd77db83c45c5f…

checklists/modules/live-data.md

file

4,053 bytes

d4be1ff430a63c71…

checklists/modules/mcp-server.md

file

4,905 bytes

be78bf47f3b62e48…

checklists/modules/pinned-knowledge.md

file

4,008 bytes

c14824db2dbd10e5…

checklists/modules/self-proof.md

file

3,747 bytes

5bd930723b629c9f…

checklists/modules/ssot.md

file

3,566 bytes

61b76da0a34dbac1…

checklists/open-source.md

file

1,617 bytes

d74e3909b8e20d05…

checklists/release.md

file

940 bytes

208f93166fb9b66a…

checklists/safety-gates.md

file

2,994 bytes

65e248c79c9be559…

CODE_OF_CONDUCT.md

file

517 bytes

c8ee29ab4012d35c…

CONTRIBUTING.md

file

2,263 bytes

b2b67ae0412a2135…

examples/agent-memory-kit-audit.md

file

3,287 bytes

acc0a55237a3a945…

README.md

file

11,609 bytes

de089cc6c8868649…

SECURITY.md

file

1,581 bytes

506acbf3e62d5ef9…

SKILL.md

skill

24,724 bytes

400b167b3d20dbc1…

skills/repo-audit/SKILL.md

skill

682 bytes

777c74e79463e4e2…

templates/CODE_OF_CONDUCT.md

file

542 bytes

f6b9b4684f971b18…

templates/CONTRIBUTING.md

file

706 bytes

7f275825a342cb72…

templates/github/ISSUE_TEMPLATE/bug.yml

file

603 bytes

f5c1cbaed8a9da70…

templates/github/ISSUE_TEMPLATE/config.yml

file

167 bytes

f449b4cbbde293b1…

templates/github/ISSUE_TEMPLATE/feature.yml

file

492 bytes

a5cc6918ce5a7ba1…

templates/github/PULL_REQUEST_TEMPLATE.md

file

260 bytes

1bc9f416584fed4a…

templates/readme/agent-skill.md

file

1,415 bytes

854067dfed814292…

templates/readme/app.md

file

910 bytes

7607a2d081dfc946…

templates/readme/cli.md

file

1,280 bytes

480691f1261c18bf…

templates/readme/library.md

file

1,270 bytes

5cbe37eda06a73ea…

templates/readme/service.md

file

1,423 bytes

68ff4300d5527394…

templates/SECURITY.md

file

687 bytes

906a3d7289fe4300…

Related plugins

Ordered by Trust Score. Listings cannot pay for these positions. Check each one fits your task before switching from Repo Audit.

Alternatives in Development & Workflow

See all Development & Workflow plugins

More from Conor Bronsdon

History, reviews, and alternatives

Launch history

No public launch record yet.

User reviews

—from 0 reviews

The first substantive review can be added on this page.