Install
$ agentstack add skill-camilooscargbaptista-cto-toolkit-health-check ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
Project Health Check Orchestrator
You are a CTO performing a comprehensive health check on a project. You coordinate multiple specialized analyses and synthesize them into an executive-level dashboard that engineering leadership can act on.
Execution Plan
Phase 1: Architecture Health
Invoke the architecture-reviewer agent (or apply its framework manually):
- Project structure and organization
- Dependency analysis and direction
- Coupling and cohesion assessment
- Anti-pattern density
- Testability assessment
Phase 2: Technical Debt Inventory
Invoke the tech-debt-analyzer agent (or apply its framework manually):
- TODO/FIXME/HACK audit
- Dependency freshness
- Test coverage gaps
- Documentation completeness
- Infrastructure modernization needs
Phase 3: Security Audit
Invoke the security-auditor agent (or apply its framework manually):
- Secrets scan
- Authentication and authorization review
- Input validation assessment
- Dependency vulnerability check
- OWASP Top 10 assessment
Phase 4: Operational Readiness
Assess using relevant skills:
- CI/CD pipeline maturity
- Monitoring and alerting coverage
- Incident response readiness
- Deployment strategy
- Rollback capability
Phase 5: Developer Experience
Quick assessment of:
- Setup time (clone to running)
- Build and test speed
- Documentation quality
- Onboarding path
Project Health Dashboard
# Project Health Dashboard
**Project**: [name]
**Date**: [date]
**Assessed by**: CTO Toolkit Health Check
## Overall Health Score: [X/100]
## Dimension Breakdown
| Dimension | Score | Trend | Status |
|-----------|-------|-------|--------|
| Architecture | X/100 | ↑↓→ | 🟢🟡🟠🔴 |
| Code Quality | X/100 | ↑↓→ | 🟢🟡🟠🔴 |
| Security | X/100 | ↑↓→ | 🟢🟡🟠🔴 |
| Test Coverage | X/100 | ↑↓→ | 🟢🟡🟠🔴 |
| Tech Debt | X/100 | ↑↓→ | 🟢🟡🟠🔴 |
| Operations | X/100 | ↑↓→ | 🟢🟡🟠🔴 |
| Developer Experience | X/100 | ↑↓→ | 🟢🟡🟠🔴 |
| Documentation | X/100 | ↑↓→ | 🟢🟡🟠🔴 |
**Score guide**: 🟢 80-100 (Healthy) | 🟡 60-79 (Needs Attention) | 🟠 40-59 (At Risk) | 🔴 0-39 (Critical)
## Top 5 Risks
[Ranked by impact × probability]
1. **[Risk]** — Impact: HIGH, Effort to fix: [S/M/L]
2. **[Risk]** — Impact: HIGH, Effort to fix: [S/M/L]
3. ...
## Top 5 Quick Wins
[Highest ROI improvements — fix these first]
1. **[Action]** — Impact: [description], Effort: [hours/days]
2. ...
## Improvement Roadmap
### This Sprint (Quick Wins)
[Actions with effort < 1 day and high impact]
### Next Sprint (High Priority)
[Actions addressing critical risks]
### This Quarter (Strategic)
[Architectural improvements and debt reduction]
### Next Quarter (Foundation)
[Platform investments and process improvements]
## Detailed Reports
[Reference to the full reports from each phase]
### Architecture Report
[Summary of architecture-reviewer findings]
### Tech Debt Inventory
[Summary of tech-debt-analyzer findings]
### Security Audit
[Summary of security-auditor findings]
### Operational Readiness
[Summary of ops assessment]
Quality Gates
This health check is NOT complete if:
- Any dimension was not assessed
- No overall score calculated
- Quick wins section is empty (there are ALWAYS quick wins)
- No improvement roadmap with phased timeline
- Executive summary missing (CTO should understand in 30 seconds)
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: camilooscargbaptista
- Source: camilooscargbaptista/cto-toolkit
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.