audit-workflow

Orchestrate project audits across architecture, security, and code quality.

Updated Apr 12, 2026
One-click install
npx skills add https://github.com/softmg/product-tracker --skill audit-workflow-softmg
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: audit-workflow
Source: https://github.com/softmg/product-tracker/tree/main/.cursor/skills/audit-workflow
Command: npx skills add https://github.com/softmg/product-tracker --skill audit-workflow-softmg

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Provides a repeatable, multi-stage orchestration for assessing project health by combining architecture review, security analysis, and code quality checks into a single consolidated audit and remediation flow.

Core Features & Use Cases

  • Sequential multi-agent analysis: runs senior-reviewer, security-auditor, and reviewer in order so each phase builds on the last and avoids duplicate findings.
  • Scope-aware audits: supports full-project scans, directory or single-file deep reviews, and change-based audits using git diffs or --since ranges.
  • Severity aggregation and reporting: consolidates findings, computes a health score, generates a markdown audit report, and saves it to configured documentation paths.
  • Optional remediation routing: categorizes confirmed critical findings into structural (refactor) or behavioral/security (planner+worker) remediation flows with verification steps and test cycles.

Quick Start

Run the audit-workflow by issuing the command /audit to perform a full project audit covering architecture, security, and code quality reviews.

Frequently Asked Questions about audit-workflow

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run a comprehensive project health audit for architecture, security, and code quality?

To run a comprehensive project health audit, initiate the workflow to orchestrate sequential multi-agent analyses across architecture, security, and code quality. It aggregates findings into a health score and generates a consolidated markdown report for your project.

Can I scope a code review and security audit to only recent git diffs or specific directories?

Yes, you can scope code review and security audits to full projects, selected directories, single files, or commit ranges. Change-based audits use git diffs or --since ranges to isolate recent modifications for targeted health checks.

What is the best way to automate pre-release code checks and security analysis?

The best way to automate pre-release code checks is using a scope-aware audit workflow that runs sequential senior-reviewer and security-auditor agents. This avoids duplicate findings and generates a consolidated health score before release.

How does the health score calculation work during an architecture and security audit?

The health score calculation works by sequentially running architecture, security, and code quality analyses, then aggregating the severity of all confirmed findings into a single quantitative metric within a consolidated markdown audit report.

Does the audit workflow support routing critical security findings into an automated remediation workflow?

Yes, the audit workflow supports optional remediation routing for confirmed critical findings. It categorizes issues into structural refactoring or behavioral security flows, complete with verification steps and test cycles.

When should I use an end-to-end project audit instead of a standard code review?

You should use an end-to-end project audit instead of a standard code review when you need onboarding assessments, periodic health checks, or pre-release validation that combines architecture, security, and code quality into a unified health score.