audit

Audit codebases for security, contracts, patterns, observability, and operations issues.

5|1|Updated Jan 26, 2026
One-click install
npx skills add https://github.com/SynapSync/skills-registry --skill audit-synapsync
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: audit
Source: https://github.com/SynapSync/skills-registry/tree/main/cognitives/skills/analytics/audit
Command: npx skills add https://github.com/SynapSync/skills-registry --skill audit-synapsync

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Run a structured, evidence-based audit of a codebase across security, contracts, patterns, observability, and ops to surface issues and risks before release.

Core Features & Use Cases

  • Structured, multi-domain codebase audit covering security, contracts, patterns, observability, and ops.
  • Phase-based analysis: first detect context, then apply the requested domains with a read-only inspection.
  • Actionable findings with risk levels to support safe, policy-driven releases.

Quick Start

Run the audit on your codebase with /audit [domain?] to scan all domains by default.

Frequently Asked Questions about audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run a security and quality audit on my codebase before release?▼

Run a security and quality audit on your codebase using a phase-based, read-only inspection to identify and report structured, evidence-based issues across multiple domains. It surfaces actionable findings with risk levels to support safe, policy-driven releases.

What is the best way to perform a multi-domain codebase audit for Go, Python, TypeScript, and Rust?▼

A multi-domain codebase audit evaluates security, contracts, patterns, observability, and operations across Go, Python, TypeScript, and Rust projects. It applies phase-based context detection and read-only analysis to generate documented risk findings.

Does this codebase audit tool support pull request reviews and quality gates?▼

Yes, codebase audit analysis supports pre-release code reviews, security assessments, pull requests, and quality gates. It provides configurable domain scope to target specific checks and delivers evidence-based findings.

Can I scan only specific domains like observability and contracts during a codebase audit?▼

Yes, you can configure the domain scope to scan specific areas like observability and contracts during a codebase audit. By default, the tool applies all available domain checks to ensure comprehensive coverage.

How does a read-only codebase inspection report security vulnerabilities and operational risks?▼

A read-only codebase inspection reports security vulnerabilities and operational risks by applying phase-based context detection followed by domain-specific checks. It outputs structured, documented risk findings without modifying the underlying source code.

Are there limitations when running automated codebase audits across different programming languages?▼

Automated codebase audits are limited to Go, Python, TypeScript, and Rust projects. The analysis is strictly read-only, meaning it surfaces documented risk findings but does not automatically remediate the detected security or quality issues.