skyclaw-purple-auditor

Run a security audit on local Sky-Claw code by executing the auditor in local-wsl2 mode, which applies static AST analysis and trust boundary mapping to detect vulnerabilities. The process uses a seven-phase framework with human-in-the-loop review to generate immutable audit trails.

AST analysis maps trust boundaries in local codebases by parsing source code structure to identify risky integrations and compliance gaps. This static analysis identifies vulnerabilities across mods, configurations, and automation pipelines while maintaining a self-contained local execution environment.

This static analysis tool aligns with ISO 27001, NIST CSF 2.0, ISO 42001, and EU AI Act compliance requirements. It maps trust boundaries and detects compliance gaps in local codebases while generating immutable SARIF audit trails for enterprise security reviews.

WSL2 is required to execute local security audits for Sky-Claw projects, ensuring a self-contained local execution environment. This setup supports static AST analysis and vector-based vulnerability pattern matching while keeping all code processing isolated locally.

Generate immutable audit trails for source code vulnerabilities by running the HITL-enabled security auditor, which outputs SARIF files during the review process. It combines AST analysis with vector-based vulnerability patterns to document detected risks and compliance gaps thoroughly.

Human-in-the-loop review validates static code analysis findings before they are committed to immutable audit trails. This approach ensures that detected vulnerabilities, risky integrations, and compliance gaps in local Sky-Claw configurations are accurately verified before finalizing enterprise audit reports.