Аудит сборки и CI на скрытые риски

devops

audit-build-ci is a Claude Code skill that audits the build and CI configuration of the Caffeine project for subtle correctness risks. It reads `build.gradle.kts` (root and caffeine module), custom plugins from `gradle/plugins/`, GitHub Actions workflows in `.github/workflows/`, and `gradle.properties`, running entirely without model invocation (`disable-model-invocation: true`). The skill checks for misconfigured dependency scopes, incorrect test isolation, non-reproducible builds, Gradle cache misconfiguration, incorrect CI matrix coverage, silent test skipping, dependency vulnerabilities, secret exposure, and tricky multi-line YAML issues — such as a `>` folded scalar retaining a trailing newline that corrupts string parsing when spliced into another folded scalar. Only findings that could produce incorrect artifacts, missed failures, or false confidence in test results are reported.