audit-2-scan

What problem does it solve?

It helps you find real, fixable defects and security weaknesses in your codebase before deployment by performing a structured, destructive review across critical engineering categories.

Core Features & Use Cases

• End-to-end destructive scan: Reviews bugs/runtime risks, security issues (including dependency vulnerabilities via the package manager audit), business logic, resilience/error handling, performance, maintainability, and tests.
• Category-by-category reporting: Writes results into separate files under docs/audits/temp/ for traceable, incremental remediation.
• Actionable issue formatting: Produces numbered issues with severity, file/line location, impact, problematic code, and a suggested fix.
• Security package audit integration: Requires running the appropriate package manager audit (e.g., npm audit) and reporting CRITICAL/HIGH vulnerabilities as individual issues with CVE and fixed versions.

Quick Start

Ask the agent to run the audit scan on your project after you have completed audit-1-setup, specifying whether you want the full 7-category scan or only the security category.