audit

Automate security audits in code repositories and summarize JSON findings.

Updated Mar 30, 2026
One-click install
npx skills add https://github.com/weside-ai/claude-code-plugin --skill audit-weside-ai
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: audit
Source: https://github.com/weside-ai/claude-code-plugin/tree/main/we/skills/audit
Command: npx skills add https://github.com/weside-ai/claude-code-plugin --skill audit-weside-ai

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

This Skill simplifies the process of conducting security audits in code repositories by automating the checks and providing a summary of findings.

Core Features & Use Cases

  • Security Tool Availability Check: Identifies and lists installed security tools.
  • Automated Audit Execution: Executes a security script (if available) or individual tools for a comprehensive scan.
  • JSON Report Parsing: Interprets JSON reports generated by security scans and summarizes findings by severity.
  • Manual Review Recommendations: Suggests further manual checks after automated scans.
  • Use Case: Ideal for performing routine security audits to identify potential vulnerabilities and breaches in code repositories.

Quick Start

To perform a security audit, use the /we:audit command in the Claude Code plugin.

Frequently Asked Questions about audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate a security audit for a code repository?

You can automate a security audit by running the `/we:audit` command, which checks for installed security tools, executes scanning scripts, and parses JSON reports to summarize vulnerability findings.

What is repository scanning in a DevSecOps pipeline?

Repository scanning in a DevSecOps pipeline continuously runs automated vulnerability assessments using tools like Semgrep, Trivy, and Gitleaks to identify potential security breaches and enforce compliance checks.

Do I need to install Semgrep, Trivy, and Gitleaks before scanning?

Yes, you need security tools like Semgrep, Trivy, and Gitleaks installed for automated scanning and reporting. The audit process checks tool availability before executing comprehensive vulnerability scans.

How does automated vulnerability assessment handle JSON security reports?

Automated vulnerability assessment parses JSON reports generated by security scans, interpreting the data to present a consolidated summary of security findings categorized by their severity levels.

What should I do after an automated code security scan completes?

After an automated code security scan completes, you should perform further manual review checks as recommended by the summary to investigate potential vulnerabilities and breaches not caught by automated tools.