kc-audit

Audit code implementation against VERIFY statements in specifications.

Updated Aug 27, 2026
One-click install
npx skills add https://github.com/knowz-io/knowzcode --skill kc-audit
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: kc-audit
Source: https://github.com/knowz-io/knowzcode/tree/main/.gemini/skills/kc-audit
Command: npx skills add https://github.com/knowz-io/knowzcode --skill kc-audit

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill provides a read-only audit of code implementation against defined specifications, ensuring quality, security, and compliance without altering existing files.

Core Features & Use Cases

  • Specification Comparison: Compares code against VERIFY statements in specifications.
  • Gap Identification: Pinpoints missing features, incomplete criteria, and untested code paths.
  • Security & Risk Assessment: Checks for security concerns and assesses risks associated with identified gaps.
  • Standalone Audits: Supports audits for spec quality, architecture, security, and integration points.

Quick Start

Perform a read-only audit of the current implementation against all specifications.

Frequently Asked Questions about kc-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit code implementation against specifications?

A read-only quality audit compares code implementation against VERIFY statements in `knowzcode/specs/` to identify missing features, incomplete criteria, and untested code paths without modifying existing files.

What security vulnerabilities can a code review check for?

A code review security audit checks for vulnerabilities and assesses risks associated with identified gaps in architecture adherence and integration health, comparing implementation against defined specifications to ensure compliance.

Can I verify compliance without altering existing files?

Yes, you can verify compliance without altering files by performing a standalone read-only audit that assesses spec quality, architecture adherence, security vulnerabilities, and integration points against defined specifications.

How do I identify gaps in architecture adherence and untested code paths?

Identify gaps in architecture adherence and untested code paths by analyzing implementation against VERIFY statements in specifications and assessing `knowzcode_loop.md` and `knowzcode_tracker.md` to pinpoint missing features and incomplete criteria.

What specifications do I need to set up before running a quality audit?

Before running a quality audit, you need specifications containing VERIFY statements in `knowzcode/specs/` and assessment files including `knowzcode/knowzcode_loop.md` and `knowzcode/knowzcode_tracker.md` for comparison.

Does the audit process modify my source code during review?

No, the audit process is strictly read-only and does not modify your source code during review, ensuring a safe quality check, security review, and compliance verification against defined specifications.