About audit-integrity
audit-integrity is a skill for security auditors and code reviewers. It structures evidence checks, second-pass review, report scoring, and recording lessons learned.
Key features
- 01Scope clarification protocol
- 02Evidence and anti-rationalization rules
- 03Second-pass coverage review
- 04Report quality scoring
- 05Security lessons and memory templates
Use cases
- 01Reviewing code for security findings
- 02Checking threat-model evidence and data flows
- 03Scoring a draft audit report
- 04Recording lessons after a security scan
Install
Copy the command and run it in a terminal.
$
npx skills add https:/ / github.com/ github/ awesome-copilot --skill audit-integrityAfter installing, type/audit-integrityin Claude Code to confirm it loaded.
Bundled files
References and scripts installed along with SKILL.md.
references/anti-rationalization-guard.mdclarification-protocol.mdnon-negotiable-behaviors.mdretry-protocol.mdself-critique-loop.mdself-learning-system.mdself-reflection-quality-gate.mdDetails
From the project READMEAudit Integrity Skill
Enforce output quality, intellectual honesty, and continuous improvement across security audits and code reviews.
When to Use
- Perform security analyses, threat models, code reviews, or quality audits.
- Validate that every finding has verified code evidence and taint flow.
- Prevent the suppression or rationalization of security findings.
- Evaluate draft reports against the quality gate threshold (score ≥ 8/10).
- Record lessons learned and security memories after you complete a scan.
Components
This skill provides 7 modular capabilities in the references/ directory. Load each file when you reach its execution phase:
| Component | Reference File | Purpose |
|---|---|---|
| Clarification Protocol | references/clarification-protocol.md | Ask a maximum of 2 targeted questions when scope is not clear |
| Anti-Rationalization Guard | references/anti-rationalization-guard.md | Prohibited rationalizations and mandatory responses for findings |
| Self-Critique Loop | references/self-critique-loop.md | Mandatory second pass to verify evidence and coverage |
| Retry Protocol | references/retry-protocol.md | Tool failure and empty search handling: retry once, then document |
| Non-Negotiable Behaviors | references/non-negotiable-behaviors.md | Mandatory rules: do not fabricate, cite evidence, report gaps |
| Self-Reflection Quality Gate | references/self-reflection-quality-gate.md | Scoring rubric (1–10 scale) with a minimum threshold of 8 |
| Self-Learning System | references/self-learning-system.md | Templates and rules for lessons and security memories |
Execution Flow
Load reference files as you reach each phase:
- Before analysis: If scope or policy is not clear, read references/clarification-protocol.md. Ask a maximum of 2 targeted questions.
- During analysis: Follow references/non-negotiable-behaviors.md. At each triage decision, consult references/anti-rationalization-guard.md.
- On tool or search failure: Follow references/retry-protocol.md. Do not assume code is secure without verification.
- After initial analysis: Complete a second pass with the checklist in references/self-critique-loop.md. Verify taint traces and manifest coverage.
- Before delivery: Score the draft report using references/self-reflection-quality-gate.md. All categories must score ≥ 8.
- Final delivery: Record lessons and memories using references/self-learning-system.md.
Comments
Markdown supported