跳到主要内容

audit-integrity 精选

Enforce output quality, evidence verification, and quality gates across security audits. Use this skill when you perform SAST, SCA, threat modeling, or security code reviews. Use this skill to verify code locations and taint traces for all findings. Use this skill to prevent the suppression of valid security findings. Use this skill to evaluate reports against quality thresholds (score ≥ 8/10) before delivery.

编码 Codex CLIMCP 客户端 v1.1 MIT 4.0 万
在 GitHub 打开

安装方式

cp -r skills/audit-integrity ~/.claude/skills/audit-integrity

把该 skill 目录放进客户端 skills 目录。不同客户端的目录可能不同,Claude Code 默认是 ~/.claude/skills/

整仓一次性获取:git clone --depth 1 https://github.com/github/awesome-copilot.git

依赖与权限

  • 无需 API Key
  • 无需联网
  • 无外部命令依赖
  • 以上为按正文与 frontmatter 自动推断的信号,仅供参考;安装前建议先阅读原文。
触发场景
you perform SASTSCAthreat modelingsecurity code reviews

SKILL.md 正文

来源 github/awesome-copilot@70ddff7 · 许可 MIT · 内容未修改

Audit Integrity Skill

Enforce output quality, intellectual honesty, and continuous improvement across security audits and code reviews.

When to Use

  • Perform security analyses, threat models, code reviews, or quality audits.
  • Validate that every finding has verified code evidence and taint flow.
  • Prevent the suppression or rationalization of security findings.
  • Evaluate draft reports against the quality gate threshold (score ≥ 8/10).
  • Record lessons learned and security memories after you complete a scan.

Components

This skill provides 7 modular capabilities in the references/ directory. Load each file when you reach its execution phase:

ComponentReference FilePurpose
Clarification Protocol[references/clarification-protocol.md](references/clarification-protocol.md)Ask a maximum of 2 targeted questions when scope is not clear
Anti-Rationalization Guard[references/anti-rationalization-guard.md](references/anti-rationalization-guard.md)Prohibited rationalizations and mandatory responses for findings
Self-Critique Loop[references/self-critique-loop.md](references/self-critique-loop.md)Mandatory second pass to verify evidence and coverage
Retry Protocol[references/retry-protocol.md](references/retry-protocol.md)Tool failure and empty search handling: retry once, then document
Non-Negotiable Behaviors[references/non-negotiable-behaviors.md](references/non-negotiable-behaviors.md)Mandatory rules: do not fabricate, cite evidence, report gaps
Self-Reflection Quality Gate[references/self-reflection-quality-gate.md](references/self-reflection-quality-gate.md)Scoring rubric (1–10 scale) with a minimum threshold of 8
Self-Learning System[references/self-learning-system.md](references/self-learning-system.md)Templates and rules for lessons and security memories

Execution Flow

Load reference files as you reach each phase:

  1. Before analysis: If scope or policy is not clear, read [references/clarification-protocol.md](references/clarification-protocol.md). Ask a maximum of 2 targeted questions.
  2. During analysis: Follow [references/non-negotiable-behaviors.md](references/non-negotiable-behaviors.md). At each triage decision, consult [references/anti-rationalization-guard.md](references/anti-rationalization-guard.md).
  3. On tool or search failure: Follow [references/retry-protocol.md](references/retry-protocol.md). Do not assume code is secure without verification.
  4. After initial analysis: Complete a second pass with the checklist in [references/self-critique-loop.md](references/self-critique-loop.md). Verify taint traces and manifest coverage.
  5. Before delivery: Score the draft report using [references/self-reflection-quality-gate.md](references/self-reflection-quality-gate.md). All categories must score ≥ 8.
  6. Final delivery: Record lessons and memories using [references/self-learning-system.md](references/self-learning-system.md).

质量与来源

所属仓库
github/awesome-copilot
仓库星标
4.0 万
最近更新
今天
采集时间
今天
commit
70ddff7fab9d
内容指纹
sha256:f2aa1a0cce91cfc
文件路径
skills/audit-integrity/SKILL.md

同仓库其它 Skill

查看全部 50 个
agentic-workflows
Route gh-aw workflow design/create/debug/upgrade requests to the right prompts.
精选 github/awesome-copilot 4.0 万 原文
Codex CLIMCP 客户端
code-review
Review pull requests for repository fit, meaningful value, trustworthy provenance, differentiation, and maintainability in awesome-copilot.
精选 github/awesome-copilot 4.0 万 原文
Codex CLIMCP 客户端
create-canvas-extension
Create or register a canvas extension in the awesome-copilot repository. Use when asked to scaffold a new canvas extension, create its plugin.json, add a reusable extension to one or more plugins, or migrate extension metadata. Extensions are reusable source under extensions/; shippable plugin manifests belong under plugins/.
精选 github/awesome-copilot 4.0 万 原文
Codex CLIMCP 客户端
acquire-codebase-knowledge
Use this skill when the user explicitly asks to map, document, or onboard into an existing codebase. Trigger for prompts like "map this codebase", "document this architecture", "onboard me to this repo", or "create codebase docs". Do not trigger for routine feature implementation, bug fixes, or narrow code edits unless the user asks for repository-level discovery.
精选 github/awesome-copilot 4.0 万 原文
Codex CLIMCP 客户端
acreadiness-assess
Run the AgentRC readiness assessment on the current repository and produce a static HTML dashboard at reports/index.html. Wraps `npx github:microsoft/agentrc readiness` and hands off rendering to the @ai-readiness-reporter custom agent. Supports policies (--policy) for org-specific scoring. Use when asked to assess, audit, or score the AI readiness of a repo.
精选 github/awesome-copilot 4.0 万 原文
Codex CLIMCP 客户端
acreadiness-generate-instructions
Generate tailored AI agent instruction files via AgentRC instructions command. Produces .github/copilot-instructions.md (default, recommended for Copilot in VS Code) plus optional per-area .instructions.md files with applyTo globs for monorepos. Use after running /acreadiness-assess to close gaps in the AI Tooling pillar.
精选 github/awesome-copilot 4.0 万 原文
Codex CLIMCP 客户端

相似 Skill

更多「编码」
access
Manage Discord channel access — approve pairings, edit allowlists, set DM/group policy. Use when the user asks to pair, approve someone, check who's allowed, or change policy for the Discord channel.
精选 anthropics/claude-plugins-official 3.8 万 原文
Claude CodeMCP 客户端
configure
Set up the Discord channel — save the bot token and review access policy. Use when the user pastes a Discord bot token, asks to configure Discord, asks "how do I set this up" or "who can reach me," or wants to check channel status.
精选 anthropics/claude-plugins-official 3.8 万 原文
Claude CodeMCP 客户端
access
Manage iMessage channel access — approve pairings, edit allowlists, set DM/group policy. Use when the user asks to pair, approve someone, check who's allowed, or change policy for the iMessage channel.
精选 anthropics/claude-plugins-official 3.8 万 原文
Claude CodeMCP 客户端
configure
Check iMessage channel setup and review access policy. Use when the user asks to configure iMessage, asks "how do I set this up" or "who can reach me," or wants to know why texts aren't reaching the assistant.
精选 anthropics/claude-plugins-official 3.8 万 原文
Claude CodeMCP 客户端
access
Manage Telegram channel access — approve pairings, edit allowlists, set DM/group policy. Use when the user asks to pair, approve someone, check who's allowed, or change policy for the Telegram channel.
精选 anthropics/claude-plugins-official 3.8 万 原文
Claude CodeMCP 客户端
configure
Set up the Telegram channel — save the bot token and review access policy. Use when the user pastes a Telegram bot token, asks to configure Telegram, asks "how do I set this up" or "who can reach me," or wants to check channel status.
精选 anthropics/claude-plugins-official 3.8 万 原文
Claude CodeMCP 客户端