How do I install the Audit skill?

Run npx skillmds@latest add tomevault-io/audit-10 in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

Is Audit safe to use?

This skill has not completed SkillMD's automated safety review yet. Independent scanners report: SkillSpector: PASS, Skill Scanner: PASS. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Audit?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Audit free to use?

Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.

tomevault-io (@tomevault-io) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Audit by tomevault-io — Agent Skill

Name: Audit
Author: tomevault-io

File contents

Security Audit Command

Run a comprehensive security audit on specified code to identify vulnerabilities.

Usage

/security:audit                    # Audit current directory
/security:audit src/               # Audit specific directory
/security:audit --staged           # Audit staged git changes
/security:audit --pr               # Audit changes in current PR
/security:audit api.py utils.js    # Audit specific files

Execution

Delegate to the security-auditor agent with the following prompt:

If no arguments provided: "Perform a security audit on the current working directory. Focus on OWASP Top 10 vulnerabilities, CWE weaknesses, and security anti-patterns. Generate a structured security audit report."

If --staged argument: "Perform a security audit on staged git changes (git diff --staged). Focus on OWASP Top 10 vulnerabilities, CWE weaknesses, and security anti-patterns in the changed code. Generate a structured security audit report."

If --pr argument: "Perform a security audit on the current PR changes (git diff main...HEAD). Focus on OWASP Top 10 vulnerabilities, CWE weaknesses, and security anti-patterns in the changed code. Generate a structured security audit report."

If files/directory specified: "Perform a security audit on $ARGUMENTS. Focus on OWASP Top 10 vulnerabilities, CWE weaknesses, and security anti-patterns. Generate a structured security audit report."

Output

The security-auditor agent produces a structured report including:

Executive summary with severity counts
Critical/High/Medium/Low findings with CWE references
Remediation guidance with code examples
Positive security findings (properly implemented controls)

Converted and distributed by TomeVault — claim your Tome and manage your conversions.

---name: audit-10description: Run security audit on code for OWASP Top 10, CWE vulnerabilities, and security anti-patterns Use when this capability is needed.---# Security Audit CommandRun a comprehensive security audit on specified code to identify vulnerabilities.## Usage```bash/security:audit # Audit current directory/security:audit src/ # Audit specific directory/security:audit --staged # Audit staged git changes/security:audit --pr # Audit changes in current PR/security:audit api.py utils.js # Audit specific files```## ExecutionDelegate to the `security-auditor` agent with the following prompt:**If no arguments provided:**"Perform a security audit on the current working directory. Focus on OWASP Top 10 vulnerabilities, CWE weaknesses, and security anti-patterns. Generate a structured security audit report."**If `--staged` argument:**"Perform a security audit on staged git changes (git diff --staged). Focus on OWASP Top 10 vulnerabilities, CWE weaknesses, and security anti-patterns in the changed code. Generate a structured security audit report."**If `--pr` argument:**"Perform a security audit on the current PR changes (git diff main...HEAD). Focus on OWASP Top 10 vulnerabilities, CWE weaknesses, and security anti-patterns in the changed code. Generate a structured security audit report."**If files/directory specified:**"Perform a security audit on $ARGUMENTS. Focus on OWASP Top 10 vulnerabilities, CWE weaknesses, and security anti-patterns. Generate a structured security audit report."## OutputThe security-auditor agent produces a structured report including:- Executive summary with severity counts- Critical/High/Medium/Low findings with CWE references- Remediation guidance with code examples- Positive security findings (properly implemented controls)---> Converted and distributed by [TomeVault](https://tomevault.io/claim/melodic-software) — claim your Tome and manage your conversions.

Frequently asked questions

Audit