Audits codebases through twelve concern lenses covering security, tech debt, design, data models, and scale.
npx skills add https://github.com/Claudfather/clauDNA --skill audit-claudfather
Please help me install this Agent Skill. Skill: audit Source: https://github.com/Claudfather/clauDNA/tree/main/skills/audit Command: npx skills add https://github.com/Claudfather/clauDNA --skill audit-claudfather
--auto for CI and headless environments, emitting structured JSON results. - Use Case: Run /claudna:audit security --auto --output github in CI to scan for injection flaws and secrets exposure, automatically filing prioritized GitHub issues for each confirmed finding. ## Quick Start Ask Claude to run an audit on your repository, for example by saying: audit this codebase for security vulnerabilities and file the findings as GitHub issues.High-intent search queries and answers about installing and using this skill.
Run the audit skill with the security lens, which scans for injection flaws, auth and authorization gaps, secrets exposure, and unsafe dependencies. Findings are severity-ranked with file and line evidence, and can be filed as GitHub issues with --output github.
It supports twelve lenses: security, tech-debt, docs, design, access-path, data-model, data-model-redesign, frontend-perf, repo-health, system, cache, and scale. Each lens has its own procedure, severity model, and output targets.
Yes, lenses marked auto-capable (security, tech-debt, docs, access-path, frontend-perf, cache, scale) run with --auto, skip user gates, and emit a structured JSON result. Interactive-only lenses like design and data-model-redesign return a blocked outcome instead.
The data-model lens is a fast fit-audit of the current schema against the code that uses it. The data-model-redesign lens evaluates whether the model should be rebuilt, compares at least three candidate architectures including incremental repair, and plans a staged migration.
No, the audit lenses produce findings, plans, and issues rather than code changes. Remediation plans are handed off to the separate build skill, and the docs lens only edits documentation files, never source code.
malloydataCategorize Malloy tables and recommend analytical scopes from model inspection.
ramybarsoumReview pull requests, branches, or changed files for correctness, security, performance, and style.
Terry-MaoAudit GitHub pull request diffs for security threats in product or tech specs.
az9713Audit project dependencies for vulnerabilities, license issues, and bloat.