skyclaw-purple-auditor

Audit local Sky-Claw codebases via static AST analysis and trust boundary mapping.

1|Updated Mar 30, 2026

Search Tags:#security-audit #hitl #trust-boundaries #local-execution #ast-analysis #sky-claw

Ready to run

npx skills add https://github.com/FacundoSu1986/Sky-Claw --skill skyclaw-purple-auditor

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: skyclaw-purple-auditor
Source: https://github.com/FacundoSu1986/Sky-Claw/tree/main/.agents/skills/skyclaw-purple-auditor
Command: npx skills add https://github.com/FacundoSu1986/Sky-Claw --skill skyclaw-purple-auditor

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires sky_claw, and includes scripts (resource) components.

What problem does it solve?

Solves security auditing challenges for local Sky-Claw codebases by combining static AST analysis, trust boundary mapping, and immutable audit trails.

Core Features & Use Cases

Enterprise-grade security audits of local Sky-Claw code, mods, configurations, and pipelines using a seven-phase metacognitive framework.
Static analysis via AST guardian, trust boundary mapping, and HITL-enabled review with immutable SARIF/audit trails.
Compliance alignment with NIST CSF 2.0, ISO 27001, ISO 42001, and EU AI Act, with local execution in WSL2.

Quick Start

Ejecuta una auditoría completa en un proyecto local de Sky-Claw usando SkyclawPurpleAuditor en modo local-wsl2.

Frequently Asked Questions about skyclaw-purple-auditor

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I run a security audit on local Sky-Claw code?▼

Run a security audit on local Sky-Claw code by executing the auditor in local-wsl2 mode, which applies static AST analysis and trust boundary mapping to detect vulnerabilities. The process uses a seven-phase framework with human-in-the-loop review to generate immutable audit trails.

Can I use AST analysis to map trust boundaries in local codebases?▼

AST analysis maps trust boundaries in local codebases by parsing source code structure to identify risky integrations and compliance gaps. This static analysis identifies vulnerabilities across mods, configurations, and automation pipelines while maintaining a self-contained local execution environment.

Does this static analysis tool align with ISO 27001 and NIST CSF 2.0 compliance?▼

This static analysis tool aligns with ISO 27001, NIST CSF 2.0, ISO 42001, and EU AI Act compliance requirements. It maps trust boundaries and detects compliance gaps in local codebases while generating immutable SARIF audit trails for enterprise security reviews.

Do I need WSL2 to execute local security audits for Sky-Claw projects?▼

WSL2 is required to execute local security audits for Sky-Claw projects, ensuring a self-contained local execution environment. This setup supports static AST analysis and vector-based vulnerability pattern matching while keeping all code processing isolated locally.

What is the best way to generate immutable audit trails for source code vulnerabilities?▼

Generate immutable audit trails for source code vulnerabilities by running the HITL-enabled security auditor, which outputs SARIF files during the review process. It combines AST analysis with vector-based vulnerability patterns to document detected risks and compliance gaps thoroughly.

Why use human-in-the-loop review for static code analysis?▼

Human-in-the-loop review validates static code analysis findings before they are committed to immutable audit trails. This approach ensures that detected vulnerabilities, risky integrations, and compliance gaps in local Sky-Claw configurations are accurately verified before finalizing enterprise audit reports.