Audit a codebase and plan the fix

For when the user says "my app is a mess — tell me what's wrong and what to do about it." Diagnostic, language-agnostic, and evidence-based. It ends with a plain-English findings list, a FINDINGS.md in the repo, a verdict (rebuild or fix in place), and Kanban tasks.

Read first: the codespring skill's references/project-state.md (enter-from-anywhere, the five questions), references/auditing-and-fixing.md (the reasoning behind every step here), references/analyze-codebase.md, references/pitfalls.md. Then this skill's references/specialist-briefs.md (copy-ready sub-agent briefs) and references/plain-english-writeup.md (the deliverable's structure and voice).

Scripts — run these instead of doing the equivalent by hand; a check must give the same answer every time. scripts/check-repo.sh (this skill: git/delivery reality) and the codespring skill's scripts/fetch-project.sh + state.mjs + check-map.mjs (state detection and map verification). All read-only. Judgement calls stay prose.

Script paths below are relative to this skill's own folder, and the skills install side by side — so ../codespring/scripts/… reaches the core skill's scripts. Resolve them once at the start (SKILL_DIR=$(dirname <this file>)) and use absolute paths after that, because your working directory will be the user's repo.

Language- and stack-agnostic. Every named specific in this skill and its references — a rate table, a report, a state code — is a labelled worked example from the audit this was generalised from, never an assumption about the codebase in front of you. Translate the pattern; do not look for the example.

Guardrails: read-only on the target codebase, with exactly one exception — FINDINGS.md at the repo root, written only after asking, never committed. Live probing of the user's own running app and own services is fine and must be non-destructive.

0. Detect where the project already is

Run the state-detection scripts — same answer every run, no hand-counting (the codespring skill's scripts/, installed alongside this one):