Audit code security vulnerabilities across 9 languages and 14 frameworks.
npx skills add https://github.com/XhstormR/dotfiles --skill code-audit-xhstormr
Please help me install this Agent Skill. Skill: code-audit Source: https://github.com/XhstormR/dotfiles/tree/main/.claude/skills/code-audit Command: npx skills add https://github.com/XhstormR/dotfiles --skill code-audit-xhstormr
Code auditing is often manual, slow, and error-prone. This Skill orchestrates automated, self-contained code-security audits with a dual-track model and multi-agent reasoning to reliably identify vulnerabilities across languages and frameworks.
To begin, run code-audit on a target repository to generate a structured vulnerability report with confirmed findings and remediation guidance.
High-intent search queries and answers about installing and using this skill.
Static analysis for code security uses a dual-track approach combining sink-driven and control-driven detection. This multi-agent workflow cross-references 143 mandatory checks with real-world WooYun cases to comprehensively identify vulnerabilities across supported languages.
Code audit accuracy is enforced through anti-hallucination rules that require findings to be grounded in actual code via Read, Grep, and Glob tooling. This verification process ensures reproducible analysis turns and reliable vulnerability confirmation.
Yes, you can perform taint analysis at scale because the Skill orchestrates multi-agent reasoning to audit code security vulnerabilities. It supports deep, reproducible analysis across 9 languages and 14 frameworks for large target repositories.
The best way to identify vulnerabilities without false positives is using a dual-track model with anti-hallucination rules. This approach verifies findings against actual code using Read and Glob tooling, ensuring grounded and accurate detection.
Limitations of multi-agent static analysis include dependency on supported environments, as the workflow is constrained to 9 languages, 14 frameworks, and 143 mandatory checks. Auditing code outside these supported specifications may not yield comprehensive results.
mbwsimsCheck rule compliance in codebases and Claude sessions using CLAUDE.md files.
josavicentevwAutomate security scanning and governance across CI/CD pipelines and compliance workflows.
softmgAutomate GitHub Actions workflow generation and CI/CD pipeline management.
roderikIdentify security vulnerabilities in source code using CodeQL static analysis.
