AgentStack
Browse Sign in
Browse Why AgentStack Sell Docs
Sign in
SKILL verified Apache-2.0 Self-run

Repo Spring Cleaning

skill-johnnygreco-skills-repo-spring-cleaning · by johnnygreco

>-

No reviews yet
0 installs
18 views
0.0% view→install

Install

$ agentstack add skill-johnnygreco-skills-repo-spring-cleaning

✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.

Security review

✓ Passed

No issues found. Passed automated security review. · v0.1.0 How review works →

  • Prompt-injection patterns
  • Secret / credential exfiltration
  • Dangerous shell & filesystem operations
  • Untrusted network calls
  • Known-malicious package signatures

What it can access

  • Network access No
  • Filesystem access No
  • Shell / process execution No
  • Environment & secrets No
  • Dynamic code execution No

From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.

View the full security report →

Verified badge

Passed review? Show it. Paste this badge into your README, it links to the public security report.

AgentStack Verified badge Links to your public security report.
[![AgentStack Verified](https://agentstack.voostack.com/badges/verified.svg)](https://agentstack.voostack.com/security/report/skill-johnnygreco-skills-repo-spring-cleaning)

Reliability & compatibility

Security review passed
0 installs to date
no reviews yet
2mo ago

Declared compatibility

Claude CodeClaude Desktop

Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.

Preview Execution monitoring

We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.

How agent discovery & health will work →
Are you the author of Repo Spring Cleaning? Claim this listing to set pricing, connect Stripe payouts, and keep 70% of every sale.
Sign up to claim

About

Repo Spring Cleaning

Run an evidence-based maintenance pass that leaves the repository cleaner, better documented, and easier to keep healthy. Prefer small, defensible fixes over speculative rewrites.

Contract

  • Treat the user's objective, repository instructions, current worktree, and

project docs as the source of truth. Preserve user changes.

  • Start with inventory before edits: languages, package managers, CI, release

process, validation commands, docs, agent instructions, generated files, and ownership boundaries.

  • Use high-confidence cleanup by default: stale docs, broken commands, dead

references, invalid config, duplicated instructions, obvious code smells, and missing validation around touched behavior.

  • Preserve product and runtime behavior by default. Limit code edits to

behavior-preserving refactors and hygiene fixes; record suspected behavior bugs or semantic changes as findings or follow-ups unless the user explicitly authorizes fixing them.

  • Do not remove code, docs, dependencies, or skills merely because they look

unused. Find evidence first, then record the rationale.

  • If the work is broad enough to need durable coordination, use an available

goal-delivery skill or project tracker before making sweeping changes.

  • Use panel-review for substantive cleanup, refactoring, documentation

rewrites, agent-skill pruning, or release preparation when it is available. If it is not available, use another independent reviewer or subagent workflow with a frozen target. If no independent review is possible, stop before broad or destructive cleanup unless the user explicitly accepts the risk, and record the missing review gate as remaining risk.

  • Keep the result reproducible: record changed files, commands, validation

output, accepted/rejected review findings, remaining risks, and follow-ups.

Workflow

  1. Scope the check. Restate the spring-cleaning goal, explicit release or

publishing requirements, non-goals, and risk tolerance. Ask only for missing decisions that cannot be safely inferred.

  1. Build a baseline. Inspect repository instructions, README, contribution

docs, CI, package manifests, lockfiles, test config, release metadata, and git status. Identify generated or vendored files to avoid editing by hand. For repositories with code, record each detected language/framework, package manager or toolchain, formatter, linter, type checker, test/build command, key config file, and local idiom or contract inspected. Skip this only with an explicit no-code/runtime-surface rationale.

  1. Select audit lenses. Read [audit-lenses.md](references/audit-lenses.md)

and choose only the lenses relevant to this repository. Note skipped lenses when they would otherwise be expected.

  1. Plan cleanup slices. Group findings into safe quick fixes, risky changes

that need review, and follow-ups. Keep each implementation slice cohesive; split work that crosses many ownership boundaries.

  1. Clean deliberately. Update docs and agent instructions to match reality,

remove stale material with evidence, simplify overcomplicated code without changing behavior, align tooling with language norms, and add or repair tests that prove touched areas still behave as expected.

  1. Validate. Run the repository's documented validation commands plus any

targeted checks for touched areas. If a skill is changed, run its validator. If a script is changed or added, also run a representative sample and report the command used.

  1. Review and iterate. Freeze the diff, run panel-review or another

available independent review workflow, verify every reviewer finding against the codebase, fix accepted issues, rerun validation, and repeat review where the fix changes the reviewed surface. Do not substitute a single self-review for unavailable independent review.

  1. Report. Use [report-template.md](references/report-template.md) for the

final maintenance summary or tracker/PR update.

Agent Skills And Instructions

When the repository contains skills, prompts, AGENTS files, or other agent-facing assets, audit them as first-class maintainability surfaces:

  • Keep trigger guidance in skill frontmatter and keep loaded bodies concise.
  • Move detailed but useful material to references/; remove material that

belongs in ordinary project docs instead of a skill.

  • Validate folder names, frontmatter names, allowed files, local path leaks,

secrets, and representative script behavior.

  • Remove or merge skills only when repository evidence shows they are stale,

redundant, misleading, or better represented as documentation.

Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

Install and usage instructions live in the source repository linked above.

Reviews

No reviews yet, be the first.

Versions

  • v0.1.0 Imported from the upstream source.