audit

Audit codebases for security, contracts, patterns, observability, and operations issues.

5|1|Updated Jan 26, 2026
One-click install
npx skills add https://github.com/SynapSync/skills-registry --skill audit-synapsync
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: audit
Source: https://github.com/SynapSync/skills-registry/tree/main/cognitives/skills/analytics/audit
Command: npx skills add https://github.com/SynapSync/skills-registry --skill audit-synapsync

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Run a structured, evidence-based audit of a codebase across security, contracts, patterns, observability, and ops to surface issues and risks before release.

Core Features & Use Cases

  • Structured, multi-domain codebase audit covering security, contracts, patterns, observability, and ops.
  • Phase-based analysis: first detect context, then apply the requested domains with a read-only inspection.
  • Actionable findings with risk levels to support safe, policy-driven releases.

Quick Start

Run the audit on your codebase with /audit [domain?] to scan all domains by default.

Frequently Asked Questions about audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run a security and quality audit on my codebase before release?

Run a security and quality audit on your codebase using a phase-based, read-only inspection to identify and report structured, evidence-based issues across multiple domains. It surfaces actionable findings with risk levels to support safe, policy-driven releases.

What is the best way to perform a multi-domain codebase audit for Go, Python, TypeScript, and Rust?

A multi-domain codebase audit evaluates security, contracts, patterns, observability, and operations across Go, Python, TypeScript, and Rust projects. It applies phase-based context detection and read-only analysis to generate documented risk findings.

Does this codebase audit tool support pull request reviews and quality gates?

Yes, codebase audit analysis supports pre-release code reviews, security assessments, pull requests, and quality gates. It provides configurable domain scope to target specific checks and delivers evidence-based findings.

Can I scan only specific domains like observability and contracts during a codebase audit?

Yes, you can configure the domain scope to scan specific areas like observability and contracts during a codebase audit. By default, the tool applies all available domain checks to ensure comprehensive coverage.

How does a read-only codebase inspection report security vulnerabilities and operational risks?

A read-only codebase inspection reports security vulnerabilities and operational risks by applying phase-based context detection followed by domain-specific checks. It outputs structured, documented risk findings without modifying the underlying source code.

Are there limitations when running automated codebase audits across different programming languages?

Automated codebase audits are limited to Go, Python, TypeScript, and Rust projects. The analysis is strictly read-only, meaning it surfaces documented risk findings but does not automatically remediate the detected security or quality issues.