CodeAudit MCP v0.1.5 keeps the v0.1.4 security/CI improvements and aligns the final public skill cleanup with the published package.
Highlights:
- Read-only MCP server for AI coding agents: repo inspection, skill routing, heuristic code/docs audits, docs evidence checks, and issue/PR planning.
- Hosted HTTP project reads are restricted with CODEAUDIT_ALLOWED_ROOTS.
- Normal CI runs on push and pull requests.
- Public skill no longer contains install/run command blocks; install instructions stay in README/docs.
- Tests cover allowed roots, safe path joins, CORS allowlists, code quality fixtures, Next.js security fixtures, and docs evidence mapping.
Install:
npx -y @priyanshuchawda/codeauditSkill:
npx skills add priyanshuchawda/codeaudit --skill codeaudit