mcpField
A
audit-integrity

audit-integrity

github.com/githubSecurity40.5k204 installsUpdated 1d ago
Repository

About audit-integrity

audit-integrity is a skill for security auditors and code reviewers. It structures evidence checks, second-pass review, report scoring, and recording lessons learned.

Key features

  1. 01Scope clarification protocol
  2. 02Evidence and anti-rationalization rules
  3. 03Second-pass coverage review
  4. 04Report quality scoring
  5. 05Security lessons and memory templates

Use cases

  1. 01Reviewing code for security findings
  2. 02Checking threat-model evidence and data flows
  3. 03Scoring a draft audit report
  4. 04Recording lessons after a security scan

Install

Copy the command and run it in a terminal.

$npx skills add https://github.com/github/awesome-copilot --skill audit-integrity

After installing, type/audit-integrityin Claude Code to confirm it loaded.

Bundled files

References and scripts installed along with SKILL.md.

references/
anti-rationalization-guard.md
clarification-protocol.md
non-negotiable-behaviors.md
retry-protocol.md
self-critique-loop.md
self-learning-system.md
self-reflection-quality-gate.md

Details

From the project README

Audit Integrity Skill

Enforce output quality, intellectual honesty, and continuous improvement across security audits and code reviews.

When to Use

  • Perform security analyses, threat models, code reviews, or quality audits.
  • Validate that every finding has verified code evidence and taint flow.
  • Prevent the suppression or rationalization of security findings.
  • Evaluate draft reports against the quality gate threshold (score ≥ 8/10).
  • Record lessons learned and security memories after you complete a scan.

Components

This skill provides 7 modular capabilities in the references/ directory. Load each file when you reach its execution phase:

ComponentReference FilePurpose
Clarification Protocolreferences/clarification-protocol.mdAsk a maximum of 2 targeted questions when scope is not clear
Anti-Rationalization Guardreferences/anti-rationalization-guard.mdProhibited rationalizations and mandatory responses for findings
Self-Critique Loopreferences/self-critique-loop.mdMandatory second pass to verify evidence and coverage
Retry Protocolreferences/retry-protocol.mdTool failure and empty search handling: retry once, then document
Non-Negotiable Behaviorsreferences/non-negotiable-behaviors.mdMandatory rules: do not fabricate, cite evidence, report gaps
Self-Reflection Quality Gatereferences/self-reflection-quality-gate.mdScoring rubric (1–10 scale) with a minimum threshold of 8
Self-Learning Systemreferences/self-learning-system.mdTemplates and rules for lessons and security memories

Execution Flow

Load reference files as you reach each phase:

  1. Before analysis: If scope or policy is not clear, read references/clarification-protocol.md. Ask a maximum of 2 targeted questions.
  2. During analysis: Follow references/non-negotiable-behaviors.md. At each triage decision, consult references/anti-rationalization-guard.md.
  3. On tool or search failure: Follow references/retry-protocol.md. Do not assume code is secure without verification.
  4. After initial analysis: Complete a second pass with the checklist in references/self-critique-loop.md. Verify taint traces and manifest coverage.
  5. Before delivery: Score the draft report using references/self-reflection-quality-gate.md. All categories must score ≥ 8.
  6. Final delivery: Record lessons and memories using references/self-learning-system.md.

Comments

Markdown supported