app-audit
Installation
SKILL.md
App Audit
Audit applications and their infrastructure configurations against the standards defined in your Platform-Engineering-Constitution.md.
Workflow
- Read the platform constitution. Load
Platform-Engineering-Constitution.mdand extract all auditable standards (providers, regions, naming, tags, container standards, IaC conventions, network policies, secret management). - Discover application artifacts. Scan the repository for IaC files (
.bicep,.tf,*.yaml), Dockerfiles, Kubernetes manifests, CI/CD configs, and application code. - Run audit checks against each category below.
- Generate an audit report with findings, severity levels, and remediation recommendations.
- Present the report to the user and offer to fix any issues found.
Audit Categories
1. Cloud Provider & Region Compliance
Check that all infrastructure targets only approved providers and regions.