spectra-audit

The spectra-audit Skill analyzes your current git diff for security vulnerabilities by coordinating three adversarial agents to surface API design traps and dangerous defaults during code review.

A code review of changed code looks for security sharp edges like API design traps, dangerous defaults, and interfaces that make it easy to do the wrong thing, using a multi-agent framework to surface these pitfalls.

Yes, you can run security checks during implementation by enabling Discipline mode with the audit: true setting, which applies a condensed checklist to provide secure-by-default checks as you write code.

Yes, you need the spectra CLI installed to drive the multi-agent workflow, as the core framework requires the spectra CLI to coordinate the three adversaries and run the automated code review.

The best way to find dangerous defaults is using a multi-agent code review approach like spectra-audit's Standalone mode, which performs a full parallel analysis on the current git diff to identify insecure interfaces.