What problem does it solve? Before merging a PR or cutting a release, a single reviewer often misses cross-domain risks like authorization bypasses, duplicated business logic, or untested failure paths. This Skill coordinates a swarm of specialist reviewers and consolidates their findings into one classified, decision-ready audit report. ## Core Features & Use Cases - Specialist Swarm Dispatch: Delegates security, code quality, QA, architecture, backend, and performance checks to dedicated specialist skills and aggregates their findings. - Severity-Normalized Reporting: Classifies every finding from P0 (blocker) to P3 (low) using the Audit Classification Taxonomy and ends with an explicit APPROVE or REJECT decision. - Authorization and Data Truth Audits: Verifies permission separation across the authorization model and detects duplicated business rules and environment-sensitive assumptions. - Use Case: Before merging an auth-related PR, run the audit to have security, reviewer, QA, and architect specialists examine the diff, then receive a single report ranking an IDOR vulnerability as P0 and rejecting the merge despite passing tests. ## Quick Start Ask the agent to run /audit on your current branch or a specific PR before merging it.
