security-claim-audit

To audit security claims across marketing, docs, and UI surfaces, this Skill identifies and assesses every statement for accuracy and compliance. It collects per-claim evidence to verify claims are supported by code and architecture, avoiding promissory overstatements.

A security claim audit is a systemic review of security statements across product surfaces to ensure accuracy and prevent misleading omissions. You need this audit for quarterly reviews, pre-release checks, or post-incident assessments to maintain compliance and trust.

You generate a P0 to P3 findings report for security compliance by applying explicit audit criteria to collected security claims. The Skill evaluates claim accuracy, attaches per-claim evidence, and returns a structured report with recommended handoffs to owning teams.

This audit cannot fix overstated security claims directly because the evaluation is read-only for discovery. It directs all identified remediation fixes to the appropriate skill or owning team using the structured findings report with attached evidence.

Yes, the security claim review works for post-incident assessments alongside quarterly audits and pre-release checks. It assesses accuracy across API error messages, legal pages, and documentation, generating findings with evidence to guide team remediation.