SAPCC Full-Repo Compliance Audit v2

SkillAI & models

Full-repo SAP CC Go compliance audit against review standards.

Available today. Use it from your connected AI after setup.

Connect ahel once, and every AI you use reads what you have installed.

Then ask your AI: use the SAPCC Full-Repo Compliance Audit v2 skill

What this skill tells your AI

The instructions your AI receives, as published by notque/vexjoy-agent in skills/engineering/sapcc-audit/SKILL.md and read by ahel’s review.

Review every package against established review standards. Not checklist compliance — code-level review that finds over-engineering, dead code, interface violations, and inconsistent patterns.


Reference Loading Table

SignalLoad This FileWhen
Phase 1 beginsreferences/phase-1-discover-commands.mdDetection commands, package mapping, segmentation table
Phase 2 beginsreferences/phase-2-dispatch-agents.mdFull dispatch prompt and per-domain review checklist (11 areas)
Phase 3 beginsreferences/output-templates.mdReport scaffold, per-finding format, severity guide

Load each reference file at the start of its phase. Do not load all three upfront.


Instructions

Phase 1: DISCOVER

Goal: Map the repository and plan the package segmentation.

Read references/phase-1-discover-commands.md for the exact detection commands, segmentation table, and file-count queries.

Verify this is an sapcc project (sapcc imports in go.mod). If not, stop immediately.

Map all packages, count files per package, and produce a segmentation table (5–8 agents, 5–15 files each).

Gate: Packages mapped, agents planned. Proceed to Phase 2.


Phase 2: DISPATCH

Goal: Launch parallel agents that review packages against project standards.

Read references/phase-2-dispatch-agents.md for the full dispatch prompt (11 review areas: over-engineering, dead code, error messages, constructors, interface contracts, copy-paste, HTTP handlers, database patterns, type patterns, logging, mixed approaches).

Use the standard dispatch prompt verbatim, substituting the assigned package list.

Dispatch all agents in a single message using the Task tool with subagent_type=golang-general-engineer.

Gate: All agents dispatched. Proceed to Phase 3.


Phase 3: COMPILE REPORT

Goal: Aggregate findings into a code-level compliance report.

Read references/output-templates.md for the report scaffold, per-finding format, and deduplication rules.

Deduplicate by file:line. Write sapcc-audit-report.md. Display verdict, must-fix count, and top 5 findings inline.

Gate: Report complete.


Error Handling

ScenarioResponse
Not an sapcc projectStop immediately. Print: "This does not appear to be an SAP CC Go project (no sapcc imports in go.mod)."
Agents cannot read a fileLog and continue. Flag in the report under "Warnings."
gopls MCP tools unavailableFall back to manual grep-based analysis. Note in the report.
Too many packages (>30)Split into >8 agents. Ensure each still gets 5-15 files.
Agent finds no violationsReport is valid. Output empty sections for unused severity levels.

Audit only: READS and REPORTS. Does NOT modify code unless explicitly asked with --fix.


Integration

  • Router: /do routes via "sapcc audit", "sapcc compliance", "sapcc lead review"
  • Pairs with: go-patterns (the rules), golang-general-engineer (the executor)

Per-agent reference loading (included in each agent's dispatch prompt based on assigned packages)

Package TypeReference to Load
HTTP handlers (internal/api/)api-design-detailed.md
Test files (*_test.go)testing-patterns-detailed.md
Error handling heavy packageserror-handling-detailed.md
Architecture/driversarchitecture-patterns.md
Build/CI configbuild-ci-detailed.md
Import-heavy fileslibrary-reference.md

Always available for calibration (load only when needed): quality-issues.md, review-standards-lead.md.

Signals

GitHub stars
419
Forks
44
Last commit
Sep 2026
Advanced
Catalog kind
skill
Gateway key
sapcc-audit
Source
github.com/notque/vexjoy-agent