What problem does it solve?
It helps you find real, fixable defects and security weaknesses in your codebase before deployment by performing a structured, destructive review across critical engineering categories.
Core Features & Use Cases
- End-to-end destructive scan: Reviews bugs/runtime risks, security issues (including dependency vulnerabilities via the package manager audit), business logic, resilience/error handling, performance, maintainability, and tests.
- Category-by-category reporting: Writes results into separate files under docs/audits/temp/ for traceable, incremental remediation.
- Actionable issue formatting: Produces numbered issues with severity, file/line location, impact, problematic code, and a suggested fix.
- Security package audit integration: Requires running the appropriate package manager audit (e.g., npm audit) and reporting CRITICAL/HIGH vulnerabilities as individual issues with CVE and fixed versions.
Quick Start
Ask the agent to run the audit scan on your project after you have completed audit-1-setup, specifying whether you want the full 7-category scan or only the security category.