crustaudit©™

Audit codebases for cloud dependencies and cryptographic security standards.

Updated Mar 5, 2026
One-click install
npx skills add https://github.com/ClawStackStudios/ClawChives --skill crustaudit
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: crustaudit©™
Source: https://github.com/ClawStackStudios/ClawChives/tree/main/.crustagent/skills/crustaudit
Command: npx skills add https://github.com/ClawStackStudios/ClawChives --skill crustaudit

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill ensures that applications within the Lobsterized ecosystem strictly adhere to user sovereignty, local-first architecture, and cryptographic security principles, preventing cloud dependencies and vulnerabilities.

Core Features & Use Cases

  • Sovereignty Validation: Detects and blocks forbidden cloud dependencies (Firebase, AWS, Auth0, etc.).
  • Security Auditing: Scans for authentication weaknesses, insecure configurations, and architectural anti-patterns.
  • Use Case: Before merging a new feature into the ClawChives project, you can run this Skill to automatically verify that no new cloud services were introduced and that all database queries are properly isolated to the user.

Quick Start

Run the crustaudit skill to audit the current codebase for any sovereignty violations.

Frequently Asked Questions about crustaudit©™

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit my codebase for cloud dependencies and enforce local-first architecture?

To audit for cloud dependencies and enforce local-first architecture, run a code audit that validates against hard and soft rules concerning authentication, data isolation, and secure configurations. This detects and blocks forbidden cloud dependencies like Firebase, AWS, or Auth0.

What is user sovereignty in code security and how does an audit check for it?

User sovereignty in code security ensures applications prevent cloud dependencies and vulnerabilities. An audit checks for it by validating adherence to local-first architecture and cryptographic security standards, verifying that database queries remain properly isolated to the user.

Can I use this code audit to check SQLite and Docker configurations for security weaknesses?

Yes, you can use this code audit to check SQLite and Docker configurations. It scans for authentication weaknesses, insecure configurations, and architectural anti-patterns while enforcing cryptographic security standards within your local-first ecosystem.

What is the best way to prevent new cloud services from being introduced during a merge?

The best way to prevent new cloud services during a merge is to run a sovereignty validation audit. This automatically detects and blocks forbidden cloud dependencies like Firebase, AWS, and Auth0 before the new feature is merged into the project.

Does this sovereignty audit work without external dependencies?

Yes, this sovereignty audit operates without external dependencies. It validates codebases against hard and soft rules locally, ensuring your project maintains user sovereignty and local-first architecture without requiring external integrations.

Why does a code audit flag authentication services as architectural anti-patterns?

A code audit flags authentication services like Auth0 as architectural anti-patterns because they introduce forbidden cloud dependencies. This violates user sovereignty and local-first architecture principles by externalizing cryptographic security and data isolation.