audit

To run a security audit on your codebase, apply this Skill to code changes, deployment configurations, and infrastructure-as-code. It identifies security and quality risks, then generates structured findings with severity levels and references to standards like CWE and OWASP.

Yes, you can audit infrastructure-as-code and deployment configurations for compliance risks. The Skill surfaces cross-cutting security and architecture issues across these artifacts, enforcing mandatory frontmatter to ensure structured, actionable reporting.

The best way to tie security findings to sprint deliverables is to apply sprint-aware audits. This connects findings directly to sprint artifacts like review notes and deployment plans, accelerating remediation before release.

Yes, the audit report includes remediation steps and references to security standards. It prioritizes identified issues with actionable guidance mapped to CWE and OWASP, outputting comprehensive reports in Markdown or JSONL formats.

You generate structured security findings in Markdown and JSONL formats by applying the Skill to your codebase and sprint artifacts. It automatically produces audit reports detailing severity levels and references for fast remediation.

A codebase security audit includes comprehensive coverage across Security, Architecture, Code Quality, DevOps, and Blockchain where applicable. This surfaces cross-cutting risks throughout your development and review processes.