spectra-audit

Audit changed code for security vulnerabilities using a multi-agent approach.

Updated Mar 7, 2026
One-click install
npx skills add https://github.com/cashwu/Keyify --skill spectra-audit
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: spectra-audit
Source: https://github.com/cashwu/Keyify/tree/main/.agents/skills/spectra-audit
Command: npx skills add https://github.com/cashwu/Keyify --skill spectra-audit

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill identifies and helps fix security vulnerabilities in code changes, preventing common programming errors that lead to security breaches.

Core Features & Use Cases

  • Automated Security Audits: Analyzes code diffs for security "sharp edges" like dangerous defaults, type confusion, and silent failures.
  • Two Modes: Operates as a standalone audit tool or as a continuous checklist during development.
  • Use Case: Before merging a pull request, run this Skill to automatically scan for potential security flaws, ensuring the codebase remains robust and secure.

Quick Start

Run /spectra:audit to perform a full security audit on your current code changes.

Frequently Asked Questions about spectra-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit code changes for security vulnerabilities before merging?

To audit code changes for security vulnerabilities, this Skill analyzes code diffs for dangerous defaults, type confusion, and silent failures. It scans pull requests to identify and fix security sharp edges in API design and configuration.

What is a code security audit and what specific vulnerabilities does it catch?

A code security audit identifies programming errors that lead to breaches by scanning code changes for dangerous defaults, type confusion, and silent failures using a multi-agent approach to find security sharp edges.

Can I use automated vulnerability scanning as a continuous checklist during development?

Yes, you can use automated vulnerability scanning as a continuous checklist during development. The Skill operates in discipline mode for continuous checks, or standalone mode for a full audit before merging.

Does this security audit tool require specific dependencies to scan code diffs?

No specific dependencies are required to scan code diffs. The security audit tool operates independently to analyze code changes and identify vulnerabilities like dangerous defaults and type confusion without external components.

What is the best way to secure code against vulnerabilities in API design?

The best way to secure code against vulnerabilities in API design is running an audit that targets dangerous defaults and silent failures. This multi-agent approach identifies and helps fix security sharp edges before merging.