Skip to content
alyn
GitHub Official

Audit Integrity skill

Enforce output quality, evidence verification, and quality gates across security audits. Use this skill when you perform SAST, SCA, threat modeling, or security code reviews. Use this skill to verify code locations and taint traces for all findings. Use this skill to prevent the suppression of valid security findings. Use this skill to evaluate reports against quality thresholds (score ≥ 8/10) before delivery.

$npx skills add github/awesome-copilot --skill audit-integrity
GitHub stars
41,017
Pack installs
2.4M
Alyn Score
82/99
Updated
20 h ago
License
MIT

GitHub

Audit Integrity

Install Audit Integrity

Pick your agent. Every command is ready to paste.

$npx skills add github/awesome-copilot --skill audit-integrity

The open skills CLI detects your agents (Claude Code, Cursor, Codex and 70+ more) and installs to the right folder. Add -g to install globally.

01

Install it

Run the command above, or upload the folder in Claude.

02

Ask naturally

Describe the task. Your agent loads audit-integrity when the request matches its description.

03

Name it if needed

If it does not trigger, say “use the audit-integrity skill”. In Codex, type $audit-integrity.

The skill itself

SKILL.md

GitHub

Audit Integrity Skill

Enforce output quality, intellectual honesty, and continuous improvement across security audits and code reviews.

When to Use

  • Perform security analyses, threat models, code reviews, or quality audits.
  • Validate that every finding has verified code evidence and taint flow.
  • Prevent the suppression or rationalization of security findings.
  • Evaluate draft reports against the quality gate threshold (score ≥ 8/10).
  • Record lessons learned and security memories after you complete a scan.

Components

This skill provides 7 modular capabilities in the references/ directory. Load each file when you reach its execution phase:

Component Reference File Purpose
Clarification Protocol references/clarification-protocol.md Ask a maximum of 2 targeted questions when scope is not clear
Anti-Rationalization Guard references/anti-rationalization-guard.md Prohibited rationalizations and mandatory responses for findings
Self-Critique Loop references/self-critique-loop.md Mandatory second pass to verify evidence and coverage
Retry Protocol references/retry-protocol.md Tool failure and empty search handling: retry once, then document
Non-Negotiable Behaviors references/non-negotiable-behaviors.md Mandatory rules: do not fabricate, cite evidence, report gaps
Self-Reflection Quality Gate references/self-reflection-quality-gate.md Scoring rubric (1–10 scale) with a minimum threshold of 8
Self-Learning System references/self-learning-system.md Templates and rules for lessons and security memories

Execution Flow

Load reference files as you reach each phase:

  1. Before analysis: If scope or policy is not clear, read references/clarification-protocol.md. Ask a maximum of 2 targeted questions.
  2. During analysis: Follow references/non-negotiable-behaviors.md. At each triage decision, consult references/anti-rationalization-guard.md.
  3. On tool or search failure: Follow references/retry-protocol.md. Do not assume code is secure without verification.
  4. After initial analysis: Complete a second pass with the checklist in references/self-critique-loop.md. Verify taint traces and manifest coverage.
  5. Before delivery: Score the draft report using references/self-reflection-quality-gate.md. All categories must score ≥ 8.
  6. Final delivery: Record lessons and memories using references/self-learning-system.md.

Tips for Audit Integrity

  • • Start a fresh session after installing so your agent picks up the new skill.
  • • It bundles reference files. The agent reads them only when needed, so they cost no context until then.
  • • It is part of a pack with 40 skills. Install only the ones you need with --skill to keep triggers precise.
  • • If two skills overlap, mention the one you want by name.

Questions about Audit Integrity

What does the Audit Integrity skill do?

Enforce output quality, evidence verification, and quality gates across security audits. Use this skill when you perform SAST, SCA, threat modeling, or security code reviews. Use this skill to verify code locations and taint traces for all findings. Use this skill to prevent the suppression of valid security findings. Use this skill to evaluate reports against quality thresholds (score ≥ 8/10) before delivery.

How do I install Audit Integrity?

Run "npx skills add github/awesome-copilot --skill audit-integrity" in your project. The skills CLI installs it for Claude Code, Cursor, Codex and 70+ other agents. In Claude on the web, upload the skill folder as a ZIP under Customize > Skills.

Does Audit Integrity work in Cursor and Codex?

Yes. Audit Integrity uses the open SKILL.md format, so it works in Claude Code, Claude, Cursor, OpenAI Codex, Gemini CLI, GitHub Copilot and other agents that support agent skills.

Is Audit Integrity free?

Audit Integrity is open source on GitHub under the MIT license. It is free to install; check the license before commercial use.

Who made Audit Integrity?

Audit Integrity is published by GitHub in the github/awesome-copilot repository, together with 39 other skills.

Similar skills. From other creators.