spectra-audit

Audit code changes in a Claude Code fork for security vulnerabilities.

Updated Aug 27, 2026
One-click install
npx skills add https://github.com/MomoChenisMe/test-sdd-workflow --skill spectra-audit-momochenisme
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: spectra-audit
Source: https://github.com/MomoChenisMe/test-sdd-workflow/tree/main/spectra-test/.claude/skills/spectra-audit
Command: npx skills add https://github.com/MomoChenisMe/test-sdd-workflow --skill spectra-audit-momochenisme

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires spectra-cli, and includes scripts (resource) components.

What problem does it solve?

This Skill provides a thorough security audit of changed code in a Claude Code fork, identifying potential vulnerabilities such as dangerous defaults, type confusion, and silent failures.

Core Features & Use Cases

  • Security Audit: Identifies security issues like insecure defaults, type confusion, and silent failures in changed code.
  • Report-Only: Does not edit files or apply fixes, ensuring that all actions are reviewable and controlled.
  • Contextual Analysis: Analyzes changes using Scoundrel, Lazy Developer, and Confused Developer lenses for comprehensive insights.

Quick Start

Run spectra-audit to initiate a security audit of the latest code changes in your Claude Code fork.

Frequently Asked Questions about spectra-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run a security audit on code changes in a Claude Code fork?

To run a security audit on code changes in a Claude Code fork, execute the `spectra-audit` command. This scans recent modifications to flag potential vulnerabilities like insecure defaults and type confusion.

What specific vulnerabilities are flagged during a secure code review?

A secure code review flags potential vulnerabilities including dangerous defaults, type confusion, and silent failures. It analyzes code changes using Scoundrel, Lazy Developer, and Confused Developer lenses for comprehensive security insights.

Does the code security audit automatically fix vulnerable code?

No, the code security audit operates in report-only mode and does not edit files or apply fixes. This ensures all actions remain reviewable and controlled by developers and security teams.

Do I need a specific CLI to perform a vulnerability assessment on my code?

Yes, performing this vulnerability assessment requires a compatible CLI environment, specifically the `spectra-cli`. You must also have access to the Claude Code fork to scan the changed code.

What is the best way to review configuration integrity in changed code?

The best way to review configuration integrity is running `spectra-audit` on your code changes. It focuses on security best practices and configuration integrity without modifying your files, providing comprehensive vulnerability reports.