Aggregate and rank audit findings from multiple SDLC checks into a report.
npx skills add https://github.com/tomzx/agents --skill audit-sdlc
Please help me install this Agent Skill. Skill: audit-sdlc Source: https://github.com/tomzx/agents/tree/main/skills/audit-sdlc Command: npx skills add https://github.com/tomzx/agents --skill audit-sdlc
## What problem does it solve? This skill automates the aggregation of multiple audit checks to produce a single, prioritized findings report, reducing manual coordination and ensuring consistent compliance across the project.
## Core Features & Use Cases
### Quick Start Run /audit-sdlc with the desired scope to generate the unified findings report.
High-intent search queries and answers about installing and using this skill.
An SDLC audit aggregates and ranks findings from multiple security, dependency, and git churn checks into a single actionable report. It orchestrates underlying audit skills to merge results and produce a consolidated markdown file for consistent project compliance.
Run the /audit-sdlc command with your desired scope to generate a unified audit report. The skill invokes enabled dependencies and security checks, reads project context, and writes the consolidated findings to .sdlc/audit-report.md.
Yes, SDLC audits support scope-based execution including security, quality, diagnose, and harden. You select a chosen scope when running the audit command to filter which underlying checks are aggregated into the final report.
The best way to automate git churn and dependency analysis is orchestrating these checks into a single audit. This approach merges findings from analyze-git-churn and audit-dependencies skills, reducing manual coordination and producing repeatable results.
Yes, the audit orchestration reads project context from the .sdlc/context directory to aggregate findings properly. It requires this context to merge results from multiple enabled audit skills and write the consolidated report accurately.
cshyangInitialize Trigger.dev with npx trigger init and generate trigger.config.ts.
yoanbernabeuGenerate a Markdown security audit report from collected findings.
Vivekmano27Scan Node.js, Python, Go, and Rust dependencies for vulnerabilities and license conflicts.
XAIHTRun permitted security scanners on Python and JavaScript codebases and report aggregated findings with severity counts and remediation summaries.
