auditing quality

I was recently asked about

useful skills or tools for auditing codebase quality

Wow, that’s pretty open ended! Where to begin?