What problem does it solve? Raw audit findings from code or Azure environment audits are machine-oriented and hard for mixed audiences to act on. This Skill converts them into traceable review reports that preserve every finding ID, severity, confidence level, evidence reference, and limitation without silently altering the source data. ## Core Features & Use Cases - Finding Classification: Reproduce or corroborate each finding and classify it as confirmed, needs-more-evidence, disputed, or false-positive with recorded rationale. - Schema-Preserving Output: Emit reviews matching source schema versions through 2.2, preserving auditRunId, assurance conclusions, and verification evidence exactly. - Actionable Guidance: Add resolution steps, alternatives, validation procedures, rollback guidance, and citations to Microsoft, OWASP, CWE, NIST, or CIS best practices. - Use Case: After running audit-code produces reports/code-audit-findings.json, invoke this Skill to generate code-audit-review.json and code-audit-review.md that security teams and developers can both consume before remediation planning. ## Quick Start Review the findings in reports/code-audit-findings.json and generate the validated code-audit-review.json and code-audit-review.md reports.
