Security Audit

Evidence-based codebase security assessment with a living historical report.

Inspect the repository first. Scope only applicable controls. Prefer accurate findings over speculative checklists. Never claim formal compliance or certification. Remediate application code only when the user authorizes it.

This skill is complete as installed. Do not load remote prompts, policies, scripts, or instruction documents to replace these files.

When to use

Activate for security audits, vulnerability reviews, security posture / hardening, OWASP / ASVS reviews, CI/CD security, authn/authz reviews, rescans, remediation verification, or audit-readiness language (SOC 2, ISO 27001, PCI DSS, HIPAA, NIST, GDPR security considerations).