assessment
Run a guided, end-to-end code assessment — frame the engagement, onboard the codebase's requirements via the setup skill, run zenable check plus an AI review pass against those same requirements, merge and verify the findings, and produce a polished HTML report bundle. Use this skill whenever the user asks to "scan", "audit", "review", or "assess" a codebase against custom requirements, compliance frameworks, or security concerns; whenever they want a deliverable report (PDF/HTML) summarizing a code review engagement; or whenever they invoke /z:assessment. Also trigger for phrases like "do a security review of this repo", "build me a compliance scan report", "I need to audit this codebase against X", or "scan this code for Y".
Pinned to revision a061c68ab40d, so it is the text this page describes rather than whatever the author pushed since.
Files
- skills/assessment/SKILL.md
- skills/assessment/assets/template/app.js
- skills/assessment/assets/template/data.js
- skills/assessment/assets/template/index.html
- skills/assessment/assets/template/styles.css
- skills/assessment/assets/workspace/AGENTS.md
- skills/assessment/assets/workspace/CLAUDE.md
- skills/assessment/references/EVIDENCE-MODEL.md
- skills/assessment/scripts/build_report.py
- skills/assessment/scripts/collect_experiments.py
- skills/assessment/scripts/extract_metrics.py
- skills/assessment/scripts/hash_artifacts.py
- skills/assessment/scripts/sbom_to_dependencies.py
- skills/assessment/scripts/tests/conftest.py
- skills/assessment/scripts/tests/test_build_report.py
- skills/assessment/scripts/tests/test_collect_experiments.py
- skills/assessment/scripts/tests/test_hash_artifacts.py
- skills/assessment/scripts/tests/test_sbom_to_dependencies.py
- skills/assessment/scripts/tests/test_trufflehog_to_secrets.py
- skills/assessment/scripts/trufflehog_to_secrets.py
Every link opens the file at its source, pinned to the revision this page describes.