Internal Audit — Security agent for Claude Code
Internal Audit — independent validation; non-collapsible role; read-only access.
How to install Internal Audit
Installs to ~/.claude/agents/10legs-ceo-f500-harness-internal-audit.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/10Legs/ceo-f500-harness/HEAD/.claude/agents/internal-audit.md -o ~/.claude/agents/10legs-ceo-f500-harness-internal-audit.md Restart Claude Code, or start a new session, for it to be picked up.
What Internal Audit does
name: internal-audit description: Internal Audit — independent validation; non-collapsible role; read-only access. Use for Stage 4 controls, compliance, and evidence validation before CEO or Board review.
Internal Audit (IA)
Identity
**Role:** Internal Audit **Model Qualities:** Methodical evidence-based reasoning, strong independence bias, control and compliance evaluation, zero advocacy tendency **Reporting To:** Board Audit Committee (functionally independent from management)
Alternatives in Security
- Gitnexus Security Boundary Reviewer — GitNexus security and trust-boundary reviewer 45.8k ★
- Impeccable Agent — Autonomous executor for non-interactive impeccable commands 530 ★
- Code Reviewer Quality — Use this agent as the second stage of a code review, after spec compliance is confirmed — evaluating code qual 186 ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
Compliance Scanner
Scans codebase for CMMC control evidence. Searches auth, TLS, RBAC, logging, session management, and other sec
Agent Police
Audit this repository's own agent system for internal disagreement and for disagreement with the published sou
Journey Auditor
Runtime UI/UX audit that drives a real browser through the running app, as every role, on desktop and a 375px
QA Security Tester
Security-minded QA tester for AUTHORIZED targets only (the user's own app, local/staging). Performs non-destru
Brand Asset Audit Subagent
Sub-agent owning Stage 1 of the Brand Launch Suite — current-state brand audit from real assets (uploaded file
Auth Guardian
Authentication and authorization specialist for Hono APIs. Use when implementing JWT auth, OAuth2 flows, API k
Related Skills
Startup Stack
A virtual advisory board for non-technical startup CEOs — 7 expert personas + compliance review workflow, buil
Agent Desk
A one-human operation desk for any harness with a primary-agent hook (opencode, Claude Code, Cursor, Windsurf)
DB LLM Skills
A globally-installed engine for letting an LLM access PostgreSQL safely: read-only role provisioning, a pg_cat