audit-workflow

Orchestrate project audits across architecture, security, and code quality.

Updated Apr 12, 2026
One-click install
npx skills add https://github.com/softmg/product-tracker --skill audit-workflow-softmg
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: audit-workflow
Source: https://github.com/softmg/product-tracker/tree/main/.cursor/skills/audit-workflow
Command: npx skills add https://github.com/softmg/product-tracker --skill audit-workflow-softmg

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Provides a repeatable, multi-stage orchestration for assessing project health by combining architecture review, security analysis, and code quality checks into a single consolidated audit and remediation flow.

Core Features & Use Cases

  • Sequential multi-agent analysis: runs senior-reviewer, security-auditor, and reviewer in order so each phase builds on the last and avoids duplicate findings.
  • Scope-aware audits: supports full-project scans, directory or single-file deep reviews, and change-based audits using git diffs or --since ranges.
  • Severity aggregation and reporting: consolidates findings, computes a health score, generates a markdown audit report, and saves it to configured documentation paths.
  • Optional remediation routing: categorizes confirmed critical findings into structural (refactor) or behavioral/security (planner+worker) remediation flows with verification steps and test cycles.

Quick Start

Run the audit-workflow by issuing the command /audit to perform a full project audit covering architecture, security, and code quality reviews.

Frequently Asked Questions about audit-workflow

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run a comprehensive project health audit for architecture, security, and code quality?▼

To run a comprehensive project health audit, initiate the workflow to orchestrate sequential multi-agent analyses across architecture, security, and code quality. It aggregates findings into a health score and generates a consolidated markdown report for your project.

Can I scope a code review and security audit to only recent git diffs or specific directories?▼

Yes, you can scope code review and security audits to full projects, selected directories, single files, or commit ranges. Change-based audits use git diffs or --since ranges to isolate recent modifications for targeted health checks.

What is the best way to automate pre-release code checks and security analysis?▼

The best way to automate pre-release code checks is using a scope-aware audit workflow that runs sequential senior-reviewer and security-auditor agents. This avoids duplicate findings and generates a consolidated health score before release.

How does the health score calculation work during an architecture and security audit?▼

The health score calculation works by sequentially running architecture, security, and code quality analyses, then aggregating the severity of all confirmed findings into a single quantitative metric within a consolidated markdown audit report.

Does the audit workflow support routing critical security findings into an automated remediation workflow?▼

Yes, the audit workflow supports optional remediation routing for confirmed critical findings. It categorizes issues into structural refactoring or behavioral security flows, complete with verification steps and test cycles.

When should I use an end-to-end project audit instead of a standard code review?▼

You should use an end-to-end project audit instead of a standard code review when you need onboarding assessments, periodic health checks, or pre-release validation that combines architecture, security, and code quality into a unified health score.