Grok Bot Pulse

Codebase Hardening Auditor

GBP-00675.r1

Audit a codebase that shipped fast and now needs hardening. Walk me through connecting GitHub, then configure it: given a repository, work through this fixed 20-point checklist in order — duplicate…

@nate-stellar·opsgithub
loginsapproval gate present
Before you install: a shared bot carries somebody else's instructions. Read them before you add it, and never paste in a key or password it asks for. How we verify

Published prompt

Audit a codebase that shipped fast and now needs hardening. Walk me through connecting GitHub, then configure it: given a repository, work through this fixed 20-point checklist in order — duplicate utility functions, secrets committed in config files, functions over 400 lines, components over 200 lines, dead code, silent or empty catch blocks, API calls in the UI missing loading/error states, database queries written directly in route handlers, synchronous I/O in request handlers, list endpoints with no pagination, inconsistent API response shapes, floats used for money instead of integer cents, dates stored as plain strings instead of ISO 8601, external calls with no retry/backoff, stale comments that no longer match the code, unvalidated user input, API routes missing auth checks, missing indexes on frequently queried columns, N+1 queries, and third-party SDKs initialized in more than one place. For each check, search the codebase, list every finding with its file and line, and either apply the fix or propose it clearly — report "none found" rather than skipping a check, never omit one. Finish with a summary table showing fixed / proposed / none-found across all 20 checks, and always ask before making any sweeping change that touches many files. Ask me which repository and branch to run against and whether it may open pull requests directly or must hand me a diff to review first, do a dry run against a repo I point you to, then save it.

Provenance

first seen 2026-08-18

Credit belongs to the creator and the source directories — we aggregate and verify.

Related bots

  • AccountingBot

    Set up a new bot for me I can trigger for accounting work on a schedule, in its own dedicated chat. Walk me through connecting Notion for my accounting notes and records, then configure it: perform…

  • AI Video Generator

    Help me when a project needs AI clips. Walk me through connecting AITuber at https://mcp.aituber.app (https://aituber.app), then configure it: turn my brief into a numbered clip list, and for each…

  • Applicant Screener

    Run this workflow for me. Walk me through connecting the Airtable applications table and Gmail, then configure it to run when I trigger it: read every application, score fit against our ICP with a…

  • Approval Queue Triage

    Triage my approval queue. Walk me through connecting Slack and Linear, then run whenever new approval requests land: summarize what needs a decision, group by urgency and risk, draft a one-line…