cybertheory Audit Skill
Use this skill when the workflow state is AUDIT or SECURITY_AUDIT.
Checklist
- Secrets: Scan the provided document or code for hardcoded secrets (API keys, passwords, tokens).
- Policy: Ensure the content complies with the stated policy (e.g. no PII in logs).
- Report: Produce a structured report with:
report_hash: A short hash or id of the report (string).issue_count: Number of issues found (integer).
Example output
{
"report_hash": "audit_abc123",
"issue_count": 0
}
If critical issues are found, use the flag_critical action with a reason instead of submitting the audit.