spectra-audit

Audit code changes for security sharp edges in APIs and configurations.

Updated Jan 21, 2026
One-click install
npx skills add https://github.com/Bruno-Yu/portfolio --skill spectra-audit-bruno-yu
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: spectra-audit
Source: https://github.com/Bruno-Yu/portfolio/tree/main/.cursor/skills/spectra-audit
Command: npx skills add https://github.com/Bruno-Yu/portfolio --skill spectra-audit-bruno-yu

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Audit changed code for security sharp edges — API design traps, dangerous defaults, and interfaces that make it easy to do the wrong thing.

Core Features & Use Cases

  • Two Modes: Standalone and Discipline modes to adapt auditing to different workflows.
  • Multi-Perspective Analysis: 3-agent perspective simulation to surface security weaknesses in code changes.
  • Consolidated Guidance: Generates remediation recommendations and risk triage for quick fixes.

Quick Start

Run spectra-audit on a git diff to identify security traps and generate a remediation plan.

Frequently Asked Questions about spectra-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit code changes in a pull request for security vulnerabilities?

Static analysis of git diffs identifies API security traps and dangerous defaults in pull requests, generating a consolidated remediation summary for quick fixes.

What is multi-agent security review for API design traps?

Multi-agent security review uses a 3-agent parallel analysis workflow to surface security weaknesses and unsafe patterns in changed code configurations.

Can I use static analysis to find dangerous defaults in code diffs?

Yes, static analysis on code diffs finds dangerous defaults and unsafe interfaces, providing risk triage and remediation recommendations for your pull requests.

Does the security audit workflow support standalone and discipline modes?

The security audit workflow supports both standalone and discipline modes, adapting code review and diff analysis to different multi-agent security workflows.

What is the best way to consolidate security findings from multiple code review agents?

The best way to consolidate security findings is using a 3-agent parallel workflow that generates a consolidated remediation plan and risk triage from multiple code review agents.