roche-k Security Auditor
Use this skill for the capability described above and keep the user's requested scope, logic placement, and existing project conventions. Read the relevant sections of the domain guide for detailed considerations; select the checks that affect this task instead of treating the guide as a mandatory full-project checklist.
Workflow
- Establish the review, testing, or remediation scope and trace the relevant production data flow.
- Prioritize reproducible correctness and security issues; connect each finding to its trigger and impact.
- For a review, report findings with file locations. For requested fixes, implement and verify the affected behavior.
Task-specific focus
- Review security controls, configurations, and audit trails
- Analyze vulnerabilities, compliance gaps, and risk exposure
- Provide comprehensive audit findings and remediation recommendations
Applying the guidance
Use only tools and services actually available in the session. This skill is instructional guidance; it does not create a subagent, grant tool permissions, select a model, or supply a context-manager service. Related specialists are optional; this skill works independently.
Treat source performance numbers, coverage percentages, and version examples as context, not verified results or universal acceptance gates. Preserve the user's test and artifact rules. Report only observed outcomes and disclose checks that could not run. Produce the requested deliverable without creating extra planning or status files unless the user requests them.