Security Audit
seb1n/awesome-ai-agent-skills
Perform a broad, authorized security audit across application, infrastructure, identity, dependencies, and operations.
Enforce output quality, evidence verification, and quality gates across security audits.
Install Audit Integrity
$ npx skills add github/awesome-copilot --skill audit-integrity -a claude-codeProject install by default; add -g for ~/.claude/skills/.
$ gh skill install github/awesome-copilot audit-integrity --agent claude-codeProject scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).
$ git clone --depth 1 https://github.com/github/awesome-copilot.git skills-src && mkdir -p .claude/skills && cp -r skills-src/skills/audit-integrity .claude/skills/audit-integrity && rm -rf skills-srcUse ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.
Claude Code skills documentation · loads skills from .claude/skills/
Install the "audit-integrity" agent skill from https://github.com/github/awesome-copilot/tree/main/skills/audit-integrity into .claude/skills/audit-integrity/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "audit-integrity", then confirm the skill loads.Claude Code copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$skill-installer install https://github.com/github/awesome-copilot/tree/main/skills/audit-integrityType this inside Codex. $skill-installer <name> installs a curated skill from openai/skills. The installer writes to $CODEX_HOME/skills (default ~/.codex/skills). Restart Codex if the skill does not show up.
$ npx skills add github/awesome-copilot --skill audit-integrity -a codexProject install goes to .agents/skills/; add -g for ~/.codex/skills/.
$ gh skill install github/awesome-copilot audit-integrity --agent codexProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/github/awesome-copilot.git skills-src && mkdir -p .agents/skills && cp -r skills-src/skills/audit-integrity .agents/skills/audit-integrity && rm -rf skills-srcUse ~/.agents/skills/ instead of .agents/skills for a personal install.
Codex skills documentation · loads skills from .agents/skills/
Install the "audit-integrity" agent skill from https://github.com/github/awesome-copilot/tree/main/skills/audit-integrity into .agents/skills/audit-integrity/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "audit-integrity", then confirm the skill loads.Codex copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add github/awesome-copilot --skill audit-integrity -a cursorProject install goes to .agents/skills/; add -g for ~/.cursor/skills/.
$ gh skill install github/awesome-copilot audit-integrity --agent cursorProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/github/awesome-copilot.git skills-src && mkdir -p .cursor/skills && cp -r skills-src/skills/audit-integrity .cursor/skills/audit-integrity && rm -rf skills-srcUse ~/.cursor/skills/ instead of .cursor/skills for a personal install.
Cursor skills documentation · loads skills from .cursor/skills/, .agents/skills/, .claude/skills/, .codex/skills/
Install the "audit-integrity" agent skill from https://github.com/github/awesome-copilot/tree/main/skills/audit-integrity into .cursor/skills/audit-integrity/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "audit-integrity", then confirm the skill loads.Cursor copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gemini skills install https://github.com/github/awesome-copilot.git --path skills/audit-integrity--scope user (default) or --scope workspace; --path is the subfolder of the repo that holds the skill; --consent skips the security confirmation prompt.
$ npx skills add github/awesome-copilot --skill audit-integrity -a gemini-cliProject install goes to .agents/skills/; add -g for ~/.gemini/skills/.
$ gh skill install github/awesome-copilot audit-integrity --agent gemini-cliProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/github/awesome-copilot.git skills-src && mkdir -p .gemini/skills && cp -r skills-src/skills/audit-integrity .gemini/skills/audit-integrity && rm -rf skills-srcUse ~/.gemini/skills/ instead of .gemini/skills for a personal install, then run /skills reload.
Gemini CLI skills documentation · loads skills from .gemini/skills/, .agents/skills/
Install the "audit-integrity" agent skill from https://github.com/github/awesome-copilot/tree/main/skills/audit-integrity into .gemini/skills/audit-integrity/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "audit-integrity", then confirm the skill loads.Gemini CLI copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gh skill install github/awesome-copilot audit-integrityInstalls for Copilot at project scope by default; add --scope user for a personal install. Preview a skill first with gh skill preview. Needs GitHub CLI 2.90.0 or later (public preview).
$ npx skills add github/awesome-copilot --skill audit-integrity -a github-copilotProject install goes to .agents/skills/; add -g for ~/.copilot/skills/.
$ git clone --depth 1 https://github.com/github/awesome-copilot.git skills-src && mkdir -p .github/skills && cp -r skills-src/skills/audit-integrity .github/skills/audit-integrity && rm -rf skills-srcUse ~/.copilot/skills/ instead of .github/skills for a personal install. Commit .github/skills so cloud agent and code review can use it.
GitHub Copilot skills documentation · loads skills from .github/skills/, .claude/skills/, .agents/skills/
Install the "audit-integrity" agent skill from https://github.com/github/awesome-copilot/tree/main/skills/audit-integrity into .github/skills/audit-integrity/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "audit-integrity", then confirm the skill loads.GitHub Copilot copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add github/awesome-copilot --skill audit-integrity -a opencodeOpenCode documents no install command of its own. Project install goes to .agents/skills/; add -g for ~/.config/opencode/skills/.
$ gh skill install github/awesome-copilot audit-integrity --agent opencodeProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/github/awesome-copilot.git skills-src && mkdir -p .opencode/skills && cp -r skills-src/skills/audit-integrity .opencode/skills/audit-integrity && rm -rf skills-srcUse ~/.config/opencode/skills/ instead of .opencode/skills for a personal install.
OpenCode skills documentation · loads skills from .opencode/skills/, .claude/skills/, .agents/skills/
Install the "audit-integrity" agent skill from https://github.com/github/awesome-copilot/tree/main/skills/audit-integrity into .opencode/skills/audit-integrity/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "audit-integrity", then confirm the skill loads.OpenCode copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
Facts
- Skill name
audit-integrity- GitHub stars
- 40k
- Token cost
- ~1k tokens
- SKILL.md length
- 278 words
- Files
- 8 (incl. references)
- Skills in repo
- 417
- Repo updated
- First seen
- Licence
- MIT
At a glance
Enforce output quality, evidence verification, and quality gates across security audits.
- Works in 6 steps: Before analysis: If scope or policy is… → During analysis: Follow… → On tool or search failure: Follow… → …
- You perform SAST
- SKILL.md covers When to Use, Components and Execution Flow
- Instructions only: no scripts, shell commands, URLs or credentials in SKILL.md
What it does
Audit Integrity is an agent skill from github/awesome-copilot, published by the product's own GitHub organization. Enforce output quality, evidence verification, and quality gates across security audits. Use this skill when you perform SAST, SCA, threat modeling, or security code reviews. Use this skill to verify code locations and taint traces for all findings. Use this skill to prevent the suppression of valid security findings. Use this skill to evaluate reports against quality thresholds (score ≥ 8/10) before delivery.
Its SKILL.md is about 1k tokens, which your agent loads only when the skill is triggered. The skill folder holds 8 other files, including reference files (for example `references/anti-rationalization-guard.md`, `references/clarification-protocol.md` and `references/non-negotiable-behaviors.md`).
It sits in Security, covering Code review, Quality gates and Security review. The repository describes itself as: Community-contributed instructions, agents, skills, and configurations to help you make the most of GitHub Copilot. The licence is MIT.
When your agent uses it
- You perform SAST
- Threat modeling
- Security code reviews
- Verify code locations and taint traces for all findings
Example prompts
- “/audit-integrity”
Workflow steps
6 steps, taken from the first numbered list in SKILL.md.
- Before analysis: If scope or policy is not clear, read references/clarification-protocol.md. Ask a maximum of 2 targeted questions.
- During analysis: Follow references/non-negotiable-behaviors.md. At each triage decision, consult references/anti-rationalization-guard.md.
- On tool or search failure: Follow references/retry-protocol.md. Do not assume code is secure without verification.
- After initial analysis: Complete a second pass with the checklist in references/self-critique-loop.md. Verify taint traces and manifest…
- Before delivery: Score the draft report using references/self-reflection-quality-gate.md. All categories must score ≥ 8.
- Final delivery: Record lessons and memories using references/self-learning-system.md.
What it can do on your machine
Read from SKILL.md and the folder at commit 727ff2e. It shows what the files ask for, not the result of running them.
Tool permissions
Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.
From allowed-tools in the SKILL.md frontmatter.
Runs code
No scripts in the folder and no shell commands in SKILL.md.
From the folder's file list and the shell code blocks in SKILL.md.
Network
No URLs in SKILL.md.
From URLs in SKILL.md, links to its own repository left out.
Credentials
Names no API keys, tokens, secrets or passwords.
From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.
Context cost
Audit Integrity loads about 1k tokens when it runs, and up to ~4.6k if it reads all its reference files. Until then it costs about 107 tokens; SKILL.md has 278 words of instructions outside code blocks.
Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.
Safety
Auto-check passed
The automated check found no risky patterns in SKILL.md.
Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.
SKILL.md
The full file from github/awesome-copilot at commit 727ff2e, republished under its MIT licence (© github). 278 words, ~1,005 tokens.
Download SKILL.mdSave it as
.claude/skills/audit-integrity/SKILL.md (or your agent's skills folder). This skill also uses 7 other files; get the full folder from GitHub.- name
- audit-integrity
- description
- Enforce output quality, evidence verification, and quality gates across security audits. Use this skill when you perform SAST, SCA, threat modeling, or security code reviews. Use this skill to verify code locations and taint traces for all findings. Use this skill to prevent the suppression of valid security findings. Use this skill to evaluate reports against quality thresholds (score ≥ 8/10) before delivery.
- license
- MIT
- metadata.version
- 1.1
Audit Integrity Skill
Enforce output quality, intellectual honesty, and continuous improvement across security audits and code reviews.
When to Use
- Perform security analyses, threat models, code reviews, or quality audits.
- Validate that every finding has verified code evidence and taint flow.
- Prevent the suppression or rationalization of security findings.
- Evaluate draft reports against the quality gate threshold (score ≥ 8/10).
- Record lessons learned and security memories after you complete a scan.
Components
This skill provides 7 modular capabilities in the references/ directory. Load each file when you reach its execution phase:
| Component | Reference File | Purpose |
|---|---|---|
| Clarification Protocol | references/clarification-protocol.md | Ask a maximum of 2 targeted questions when scope is not clear |
| Anti-Rationalization Guard | references/anti-rationalization-guard.md | Prohibited rationalizations and mandatory responses for findings |
| Self-Critique Loop | references/self-critique-loop.md | Mandatory second pass to verify evidence and coverage |
| Retry Protocol | references/retry-protocol.md | Tool failure and empty search handling: retry once, then document |
| Non-Negotiable Behaviors | references/non-negotiable-behaviors.md | Mandatory rules: do not fabricate, cite evidence, report gaps |
| Self-Reflection Quality Gate | references/self-reflection-quality-gate.md | Scoring rubric (1–10 scale) with a minimum threshold of 8 |
| Self-Learning System | references/self-learning-system.md | Templates and rules for lessons and security memories |
Execution Flow
Load reference files as you reach each phase:
- Before analysis: If scope or policy is not clear, read references/clarification-protocol.md. Ask a maximum of 2 targeted questions.
- During analysis: Follow references/non-negotiable-behaviors.md. At each triage decision, consult references/anti-rationalization-guard.md.
- On tool or search failure: Follow references/retry-protocol.md. Do not assume code is secure without verification.
- After initial analysis: Complete a second pass with the checklist in references/self-critique-loop.md. Verify taint traces and manifest coverage.
- Before delivery: Score the draft report using references/self-reflection-quality-gate.md. All categories must score ≥ 8.
- Final delivery: Record lessons and memories using references/self-learning-system.md.
© github, MIT. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file
Files
SKILL.md and 7 other files (references) in skills/audit-integrity of github/awesome-copilot.
- SKILL.md
- references/anti-rationalization-guard.md
- references/clarification-protocol.md
- references/non-negotiable-behaviors.md
- references/retry-protocol.md
- references/self-critique-loop.md
- references/self-learning-system.md
- references/self-reflection-quality-gate.md
Open the folder on GitHubat commit 727ff2e
Compare with similar skills
Audit Integrity next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.
| Skill | Stars | Used in | Tokens | Auto-check | Licence | Repo updated |
|---|---|---|---|---|---|---|
| Audit Integrity this skillgithub/awesome-copilot | 40k | — | ~1k | Automated safety check: Pass | MIT | |
| Security Auditseb1n/awesome-ai-agent-skills | 206 | — | ~2.4k | Automated safety check: Notes | MIT | |
| Security AuditorFerroxLabs/wayland | 608 | — | ~5.1k | Automated safety check: Pass | Apache-2.0 | |
| Trailmark Graph Evolutiontrailofbits/skills | 7.4k | — | ~3.4k | Automated safety check: Pass | CC-BY-SA-4.0 | |
| CSO Security Auditgarrytan/gstack | 136k | — | ~4.5k | Automated safety check: Pass | MIT | |
| Trailmark Code Graphstrailofbits/skills | 7.4k | — | ~4.3k | Automated safety check: Pass | CC-BY-SA-4.0 |
Similar skills
Security Auditor
FerroxLabs/wayland
Becomes a principal security engineer who conducts comprehensive security audits of applications, APIs, and infrastructure using threat modeling and vulnerability analysis methodologies.
- Official
Trailmark Graph Evolution
trailofbits/skills
Compares Trailmark code graphs at two snapshots, such as commits, tags or directories, to surface attack paths, blast radius and taint changes that text diffs miss.
CSO Security Audit
garrytan/gstack
Runs an evidence-first security audit of a codebase through gstack's trusted launcher, with static findings by default and isolated reproduction when enabled.
- Official
Trailmark Code Graphs
trailofbits/skills
Builds a code graph of functions, classes and calls across languages, then queries it for call paths, taint, blast radius, entry points and complexity hotspots.
Security Scan
ericrisco/rsc-harness
A skill your agent uses when automated scanners drive a security sweep of a repo or app — SAST, dependency/lockfile CVEs, secrets in the tree or git history, IaC misconfig — and the raw output has…
More from github/awesome-copilot
All 417 skills in this repo- Official
Acquire Codebase Knowledge
github/awesome-copilot
Maps an unfamiliar codebase into seven evidence-backed documents in docs/codebase/, using a scan script and templates, for onboarding or architecture write-ups.
- Official
Azure Architecture Autopilot
github/awesome-copilot
Designs Azure infrastructure from a natural-language description, or diagrams an existing resource group, then refines the design through conversation and deploys it with Bicep.
- Official
Draw.io Diagram Generator
github/awesome-copilot
Generates, edits and validates draw.io files with correct mxGraph XML, covering flowcharts, architecture, sequence, ER and UML class diagrams.
- Official
Credit Risk Data Cleaning
github/awesome-copilot
Cleans raw credit data and screens variables before loan modeling, dropping unstable, noisy or redundant features and writing an Excel report of every step.
- Official
Daily Focus Board
github/awesome-copilot
Builds a warm, browser-based daily focus board the user updates by talking to their agent, with Eisenhower priorities, a brain-dump box and kind not-today carryover.
- Official
Python Pypi Package Builder
github/awesome-copilot
End-to-end skill for building, testing, linting, versioning, and publishing a production-grade Python library to PyPI.
Related
Categories
Questions about Audit Integrity
What does Audit Integrity do?
Enforce output quality, evidence verification, and quality gates across security audits. Audit Integrity is an agent skill from github/awesome-copilot, published by the product's own GitHub organization. Enforce output quality, evidence verification, and quality gates across security audits.
When should I use Audit Integrity?
Audit Integrity fits situations like: you perform SAST; threat modeling; security code reviews; verify code locations and taint traces for all findings.
How do I install Audit Integrity in Claude Code?
Run `npx skills add github/awesome-copilot --skill audit-integrity -a claude-code`. Or copy the skill folder (skills/audit-integrity in github/awesome-copilot) into .claude/skills/audit-integrity in your project. Claude Code loads it when a task matches its description.
How do I install Audit Integrity in Codex?
Run `npx skills add github/awesome-copilot --skill audit-integrity -a codex`. Or copy the skill folder (skills/audit-integrity in github/awesome-copilot) into .agents/skills/audit-integrity in your project. Codex loads it when a task matches its description.
Can I use Audit Integrity in Cursor, Gemini CLI or GitHub Copilot?
Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add github/awesome-copilot --skill audit-integrity -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/audit-integrity, .gemini/skills/audit-integrity, .github/skills/audit-integrity and .opencode/skills/audit-integrity in your project.
What does Audit Integrity need to run?
SKILL.md names no scripts, command-line tools or credentials: Audit Integrity is instructions for the agent only.
Does Audit Integrity access the network?
SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.
Is Audit Integrity safe to install?
Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.
What licence does Audit Integrity use?
Audit Integrity is published under the MIT licence (declared in SKILL.md). It allows redistribution, so the full SKILL.md is shown on this page.
How many tokens does Audit Integrity use?
About 1k tokens (SKILL.md is roughly 4k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full. Its references folder adds about 3.6k tokens, read only when the agent opens those files.
What are the alternatives to Audit Integrity?
Skills that share tags, products or a category with Audit Integrity: Security Audit (seb1n/awesome-ai-agent-skills, 206 stars), Security Auditor (FerroxLabs/wayland, 608 stars), Trailmark Graph Evolution (trailofbits/skills, 7.4k stars) and CSO Security Audit (garrytan/gstack, 136k stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.
Who maintains Audit Integrity?
github (a GitHub organization, an official publisher) maintains it in github/awesome-copilot, which has 39,748 GitHub stars. The repository holds 417 skills in this directory. The repository was last updated on October 7, 2026.
Source: github/awesome-copilot on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.