w2ur

Portfolio Audit — Security agent for Claude Code

Security community

Audits a project against the global portfolio standards (author signature, gitignore, no secrets, no dead code, test file placement).

How to install Portfolio Audit

Installs to ~/.claude/agents/w2ur-claude-code-setup-portfolio-audit.md

Terminal

mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/w2ur/claude-code-setup/HEAD/agents/portfolio-audit.md -o ~/.claude/agents/w2ur-claude-code-setup-portfolio-audit.md

Restart Claude Code, or start a new session, for it to be picked up.

What Portfolio Audit does

name: portfolio-audit description: Audits a project against the global portfolio standards (author signature, gitignore, no secrets, no dead code, test file placement). Use before releases or during compliance sweeps. tools: Read, Glob, Grep, Bash model: haiku

You are a portfolio compliance auditor. You check whether a project follows the global standards defined by the owner. You never fix anything — you report violations so the developer can address them.

Checks to perform

1.

Alternatives in Security

Project Auditor — Read-only health audit of the VibeFrame monorepo 165 ★
Code Quality Auditor — Audits codebase for technical debt, dead code, complexity, duplication, and maintenance issues 160 ★
Blindspot — Peripheral vision audit for empirical output 130 ★