audit-context-building

Trace code flows and document invariants for security auditing.

10|4|Updated Feb 5, 2026
One-click install
npx skills add https://github.com/sbknana/equipa --skill audit-context-building-sbknana
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: audit-context-building
Source: https://github.com/sbknana/equipa/tree/main/skills/security/audit-context-building/skills/audit-context-building
Command: npx skills add https://github.com/sbknana/equipa --skill audit-context-building-sbknana

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill enables ultra-granular, line-by-line code analysis to build a stable, explicit mental model before vulnerability or bug finding. It ensures deep comprehension by applying micro-level frameworks and maintaining persistent context across the codebase.

Core Features & Use Cases

  • Phase 1 — Initial Orientation: identify major modules, entrypoints, actors, and important storage constructs.
  • Phase 2 — Ultra-Granular Function Analysis: perform per-block analysis, apply First Principles, 5 Whys, and 5 Hows, and anchor invariants and assumptions in a global model.
  • Cross-Function & External Flow Analysis: trace internal calls and reason about external interactions, including external contracts.
  • Subagent Usage: spawn specialized subagents for dense or complex functions to preserve detail and coherence.
  • Stability & Anti-Hallucination Rules: enforce explicit updates when evidence contradicts prior assumptions and periodically anchor core facts.

Quick Start

Activate audit-context-building, then begin orienting on the target repository and initiate ultra-granular function analysis to build a comprehensive architectural context.

Frequently Asked Questions about audit-context-building

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I build architectural context for a security audit?

To build architectural context for a security audit, you need a bottom-up orientation that identifies major modules, entrypoints, and storage constructs before performing ultra-granular line-by-line function analysis to establish a stable mental model.

What is the best way to trace cross-module flows for vulnerability discovery?

Tracing cross-module flows for vulnerability discovery requires analyzing internal calls and reasoning about external interactions, including external contracts, to map complete execution paths and support comprehensive threat modeling.

How do you perform micro-analysis on complex codebases without losing context?

Micro-analysis on complex codebases maintains context by spawning specialized subagents for dense functions and anchoring invariants and assumptions in a global model to preserve detail and coherence.

How to prevent hallucination when doing deep code analysis for threat modeling?

Preventing hallucination during deep code analysis for threat modeling requires enforcing explicit updates when evidence contradicts prior assumptions and periodically anchoring core facts to maintain accuracy.

When do I need ultra-granular line-by-line code analysis for security?

Ultra-granular line-by-line code analysis for security is needed before vulnerability or bug finding to ensure deep comprehension by applying micro-level frameworks and maintaining persistent context across the target repository.

Does micro-analysis for security audits work without external dependencies?

Micro-analysis for security audits operates without external dependencies, applying First Principles, 5 Whys, and 5 Hows directly to the codebase to document assumptions and risks for downstream assessment.