Security Audit Orchestrator

Coordinate parallel sub-agents to audit repository modules and output Markdown/JSON reports.

1|Updated Feb 13, 2026
One-click install
npx skills add https://github.com/SecurityMindedSolutions/claude-audit-skills --skill security-audit-orchestrator
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: Security Audit Orchestrator
Source: https://github.com/SecurityMindedSolutions/claude-audit-skills/tree/main/audit-security
Command: npx skills add https://github.com/SecurityMindedSolutions/claude-audit-skills --skill security-audit-orchestrator

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Automating security audits across large codebases is error-prone and time-consuming when done manually; this skill orchestrates parallel sub-agents to comprehensively review multiple layers and consolidate findings.

Core Features & Use Cases

  • Recon: Discovers repo structure, tech stack, and conventions
  • Auto-detect: Determines which modules are relevant based on repository contents
  • Parallel scan: Launches independent sub-agents for applicable modules
  • Consolidate: Deduplicates findings and writes a single Markdown/JSON report
  • Flexibility: Runs all modules or a subset, and targets the current directory or a specified path
  • Customization: Supports per-module prompts and pre/post-processing hooks

Quick Start

Invoke /audit-security all in your repository to run all modules and generate a consolidated report.

Frequently Asked Questions about Security Audit Orchestrator

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate a security audit across a multi-service repository?

To automate a security audit across a multi-service repository, you can orchestrate parallel sub-agents to scan code, APIs, frontend, secrets, dependencies, and infrastructure, yielding a consolidated Markdown or JSON report.

How does parallel code review orchestration work for detecting security vulnerabilities?

Parallel code review orchestration works by reading the project structure, auto-detecting relevant modules, and dispatching independent sub-agents to scan them simultaneously before deduplicating findings into a single report.

Can I scan only specific modules instead of running a full security audit on the entire codebase?

Yes, you can scan specific modules instead of running a full security audit by specifying a subset during invocation, targeting either the current directory or a specified path to limit the sub-agent dispatch.

What is the best way to customize security audit prompts for different repository modules?

The best way to customize security audit prompts is by applying per-module prompt configurations alongside pre-processing and post-processing hooks to tailor the sub-agent scans for each repository component.

What formats are generated when consolidating codebase security findings?

When consolidating codebase security findings, the output formats generated are structured Markdown and JSON, which deduplicate vulnerabilities detected across code, APIs, secrets, dependencies, and infrastructure layers.