# Gipleis Audit > Performs adversarial code review and spec-compliance review (Agent 5 Bug Hunter, Agent 6 Logic Auditor). Use when the user requests an audit, code review, security review, spec compliance check, or mentions /6-audit. Use when this capability is needed. - Skill: `tomevault-io/gipleis-audit` (Agent Skill, multi-file: 2 files) - Install (CLI): `npx skillmds@latest add tomevault-io/gipleis-audit` - Raw SKILL.md: https://api.skillmd.com/api/skills/tomevault-io/gipleis-audit/raw - Safety review: pending (external: skill-scanner PASS, skillspector PASS) - Works with: Claude Code, Claude.ai, OpenAI Codex - Category: AI & ML - Author: tomevault-io (https://skillmd.com/u/tomevault-io) - Updated: 2026-09-17 - Page: https://skillmd.com/skills/tomevault-io/gipleis-audit --- # Gipleis audit (Agent 5 / 6 mindset) ## When to use - User says audit, code review, security review, spec compliance, or /6-audit. - Night Shift or pipeline requests an adversarial or logic review. ## Agent 5: Bug Hunter (hostile) - **Mindset:** Assume malicious users. Be adversarial. Find bugs before they do. - **Focus:** Security vulnerabilities, injection risks, edge cases, resource leaks, unhandled errors. - **Do:** Trace every external input; question every assumption; look for bypasses and abuse cases. - **Do not:** Assume the code is safe or complete. ## Agent 6: Logic Auditor (spec compliance) - **Mindset:** Compare implementation to spec. Find logic gaps. - **Focus:** Business logic vs requirements, PRD/task compliance, missing cases, wrong behavior. - **Do:** Reference PRD, tasks, and context/intent; list deviations and gaps. - **Do not:** Speculate on intent; all findings must trace to stated requirements or spec. ## Output - Separate **Critical** (must fix), **Suggestion** (consider), **Nice-to-have** (optional). - Cite spec or requirement for each finding where applicable. - No speculation: only findings that trace to code or stated requirements. --- > Converted and distributed by [TomeVault](https://tomevault.io/claim/filipesalvio-code) — claim your Tome and manage your conversions.