What problem does it solve? Manual code reviews often miss security vulnerabilities, dead code, and domain rule violations, especially in ecommerce systems where supplier data exposure or status mixing can cause serious business issues. This Skill provides a systematic, evidence-based audit workflow that scopes reviews to the task at hand instead of scanning the entire repository. ## Core Features & Use Cases - Three Audit Modes: Run task-focused audits on a single change or pull request, targeted audits on a specific area (backend, frontend, security, data model), or comprehensive repository-wide audits only when explicitly requested. - Ecommerce Domain Checks: Verify CustomerOrder vs SupplierOrder separation, supplier data exposure prevention, ProductVariant sellable-unit rules, and status isolation across payment, fulfillment, shipment, return, and refund flows. - Dead Code and Security Analysis: Detect unused imports, exports, and dependencies with tools like knip, plus check for hardcoded secrets, injection risks, and missing authorization. - Use Case: After implementing a new supplier order endpoint, run a task-focused audit to confirm supplier costs are not exposed in customer-facing API responses and that tests cover validation and authorization cases. ## Quick Start Audit the changes in my current git diff for security issues and ecommerce rule violations, then generate a prioritized findings report.
