application-audit

Orchestrate a multi-agent audit of Next.js, React, and Supabase codebases.

3|Updated Apr 1, 2026
One-click install
npx skills add https://github.com/anthril/official-claude-plugins --skill application-audit
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: application-audit
Source: https://github.com/anthril/official-claude-plugins/tree/main/plugins/software-development/skills/application-audit
Command: npx skills add https://github.com/anthril/official-claude-plugins --skill application-audit

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

Orchestrates a multi-agent audit of a codebase and produces a validated, evidence-backed report.

Core Features & Use Cases

  • Orchestrates nine domain-specific auditors (frontend, backend, security, leak-detection, etc.) against a codebase to surface findings with evidence.
  • Validates findings via a centralized validator and emits a final, ranked REPORT.md plus JSON sidecar.
  • Supports an open-question gate to capture unknowns and maintain traceability, while keeping source read-only.

Quick Start

Point the skill at a project directory and run the audit to produce a final REPORT.md along with per-agent reports under .anthril/audits/<ID>/.

Frequently Asked Questions about application-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run an evidence-backed codebase audit for a Next.js and Supabase project?▼

You can audit a Next.js, React, and Supabase codebase by pointing the skill at your project directory, which orchestrates nine domain-specific auditors to produce a validated REPORT.md and JSON sidecars.

What is a multi-agent software audit and how does it validate findings?▼

A multi-agent software audit deploys nine specialized auditors across a codebase to surface findings, which a centralized validator then checks to ensure accuracy and maintain traceability before emitting a final report.

Can I audit my codebase without modifying the source files?▼

Yes, the audit enforces a strictly read-only source policy, allowing the multi-agent system to analyze code and generate reports under .anthril/audits/ without altering your original project files.

Does the codebase audit support projects outside of Next.js and Supabase?▼

The audit is specifically designed to apply to Next.js, React, and Supabase applications, orchestrating domain-specific checks tailored to that stack to ensure accurate and validated reporting.

What is the best way to capture unknowns and maintain traceability during a software audit?▼

The best way to capture unknowns during a software audit is using an open-question gate mechanism, which records unresolved questions alongside evidence-backed findings to maintain full traceability in the final report.

What output formats are generated when auditing a codebase for security and leak detection?▼

Auditing a codebase generates a final ranked REPORT.md file alongside JSON sidecars, containing validated findings from specialized agents including security and leak-detection auditors.