code-auditor-gate

Identify security and quality risks in code changes with severity-ranked findings and concrete fixes.

12|1|Updated Oct 31, 2025
One-click install
npx skills add https://github.com/robkam/ytreenova --skill code-auditor-gate
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: code-auditor-gate
Source: https://github.com/robkam/ytreenova/tree/main/.ai/skills/code-auditor-gate
Command: npx skills add https://github.com/robkam/ytreenova --skill code-auditor-gate

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill performs adversarial code reviews for the Ytnova project, ranking findings by severity and proposing concrete fixes to gate decisions.

Core Features & Use Cases

  • End-to-end review workflow: Read changed files and relevant architecture/docs during a review.
  • Quality-centric checks: Validate correctness, memory safety, portability, maintainability, and architecture invariants.
  • Security-first governance: Run the mandatory Security Checklist and produce severity-ranked findings with concrete mitigations.
  • Gate decisions: End with explicit gate status and residual risks.

Quick Start

Use the code-auditor-gate skill to scan the current changes and produce a severity-ranked report with concrete fixes.

Frequently Asked Questions about code-auditor-gate

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate adversarial code review for security and quality risks?

Adversarial code review identifies security and quality risks in code changes, ranking findings by severity and proposing concrete fixes. It validates correctness, memory safety, portability, and architecture invariants across changed files to ensure robust output.

How do I enforce a mandatory security checklist during code review?

To enforce a mandatory security checklist during code review, apply predefined security checks to changed files. This produces severity-ranked findings with concrete mitigations and concludes with an explicit gate status and residual risks.

What does a severity-fixed gate status mean in code review?

A severity-fixed gate status in code review is an explicit decision point indicating whether changed files pass security and quality checks. It includes residual risks, providing a clear go or no-go signal based on ranked findings.

Can I review architecture invariants and memory safety in changed files?

Yes, you can review architecture invariants and memory safety in changed files. The review process validates correctness, memory safety, portability, and maintainability, focusing on predefined security checks to identify potential risks.

Does code review work with architecture docs and changed files?

Code review works with architecture docs and changed files by reading both during the analysis. It validates architecture invariants and applies predefined security checks to produce severity-ranked findings with concrete fixes.