spectra-audit

Audit code diffs for insecure defaults and API misuse.

Updated Jan 18, 2026
One-click install
npx skills add https://github.com/seanmars/ai-coding-setup --skill spectra-audit-seanmars
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: spectra-audit
Source: https://github.com/seanmars/ai-coding-setup/tree/main/spectra/skills/spectra-audit
Command: npx skills add https://github.com/seanmars/ai-coding-setup --skill spectra-audit-seanmars

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Audit changed code for security sharp edges — API design traps, dangerous defaults, and interfaces that make it easy to do the wrong thing.

Core Features & Use Cases

  • Identifies insecure defaults, dangerous configurations, and API misuse across code changes.
  • Provides consolidated recommendations and fixes to harden security during development workflows.
  • Use Case: When reviewing a pull request, run automated checks to surface potential security regressions and propose mitigations.

Quick Start

Run spectra-audit on your code changes to identify security weaknesses across APIs, defaults, and configurations.

Frequently Asked Questions about spectra-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit code diffs for security weaknesses in a pull request?

You can audit code changes by reviewing pull request diffs for dangerous defaults, config traps, and silent failures. This identifies security sharp edges and API misuse across the codebase, producing consolidated recommendations to fix misconfigurations and harden interfaces.

What are insecure defaults and API design traps in code changes?

Insecure defaults and API design traps are configurations that make it easy to do the wrong thing, such as silent failures or misused API boundaries. Auditing code changes identifies these dangerous defaults and config traps, providing actionable fixes to ensure safe module interfaces.

How do I check code changes for misconfigurations and improper error handling?

Checking code changes for misconfigurations and improper error handling requires reviewing diffs for silent failures and dangerous defaults. This automated security audit applies to SDKs and API libraries, generating consolidated recommendations to fix misused API boundaries and harden safety.

Can I run automated security checks on SDK and API library code changes?

Yes, you can run automated security checks on SDK and API library code changes. By reviewing pull request diffs, the audit identifies insecure defaults, misconfigurations, and improper error handling, producing actionable fixes to mitigate potential security regressions during development workflows.

What is the best way to find security regressions introduced by code changes?

The best way to find security regressions is auditing code diffs with an emphasis on dangerous defaults, config traps, and silent failures. This approach detects misused API boundaries and improper error handling in modules, generating actionable fixes to harden security.