---
description: Deep scan workspace — audit semua file, tech stack, dependencies, potential issues
---

# Audit Workspace

## Steps

// turbo-all

1. **Map Project Structure**
   ```
   list_dir on workspace root (depth 2)
   find_by_name for all source files by extension
   ```

2. **Identify Tech Stack**
   Search for config files:
   ```
   find_by_name: package.json, Cargo.toml, requirements.txt, go.mod, Dockerfile, docker-compose.yml
   ```

3. **Read Key Files**
   Read main config files found in step 2.
   Also read: README.md, .env.example, any CI/CD configs.

4. **Dependency Audit**
   Check for outdated or vulnerable dependencies:
   - **Node.js**: `npm audit` and `npm outdated`
   - **Python**: `pip list --outdated`
   - **Rust**: `cargo audit` (if installed)

5. **Security Quick Scan**
   ```
   grep_search for: hardcoded passwords, API keys, tokens, secrets
   Patterns: "password", "api_key", "secret", "token", "Bearer"
   ```

6. **Report**
   Generate a comprehensive audit report as an artifact with:
   - Tech stack summary
   - Dependency status
   - Security findings
   - Recommendations