app-audit

Installation
SKILL.md

App Audit

Audit applications and their infrastructure configurations against the standards defined in your Platform-Engineering-Constitution.md.

Workflow

  1. Read the platform constitution. Load Platform-Engineering-Constitution.md and extract all auditable standards (providers, regions, naming, tags, container standards, IaC conventions, network policies, secret management).
  2. Discover application artifacts. Scan the repository for IaC files (.bicep, .tf, *.yaml), Dockerfiles, Kubernetes manifests, CI/CD configs, and application code.
  3. Run audit checks against each category below.
  4. Generate an audit report with findings, severity levels, and remediation recommendations.
  5. Present the report to the user and offer to fix any issues found.

Audit Categories

1. Cloud Provider & Region Compliance

Check that all infrastructure targets only approved providers and regions.

Installs
6
First Seen
Mar 20, 2026