Code Hardcode Audit

Runs a battery of nine static analysis tools to find hardcoded values, magic numbers, and leaked secrets in your codebase. It's overkill in a good way: combines Python-specific tools like Ruff PLR2004 and Bandit with language-agnostic scanners like ast-grep, Semgrep, TruffleHog for entropy detection, and Gitleaks for regex-based secret scanning. You get both JSON and compiler-style text output showing exactly where constants need extraction or credentials are exposed. Use it when you're doing a security audit, tracking down configuration that should be in environment variables, or just want to find all those mystery numbers scattered through the code. The preflight check is smart, the tool matrix is well documented, and it respects .gitignore so you won't scan node_modules for an hour.

Install to Claude Code

npx -y skills add terrylica/cc-skills --skill code-hardcode-audit --agent claude-code