OSS Audit — Security skill for Claude Code
Audit the repo for open-source release across code quality, architecture, tech-stack hygiene, and GitHub collaborator readiness.
How to install OSS Audit
Installs to ~/.claude/commands/4gentic-obelus-oss-audit.md
mkdir -p ~/.claude/commands && curl -fsSL https://raw.githubusercontent.com/4gentic/obelus/HEAD/.claude/commands/oss-audit.md -o ~/.claude/commands/4gentic-obelus-oss-audit.md Restart Claude Code, or start a new session, for it to be picked up.
What OSS Audit does
description: Audit the repo for open-source release across code quality, architecture, tech-stack hygiene, and GitHub collaborator readiness. Read-only by default; offers to seed safe defaults for missing files. argument-hint: "[--fix] # default is report-only; pass --fix to be offered safe seedings interactively" allowed-tools: Read, Write, Edit, Glob, Grep, Bash, Agent
/oss-audit
One pass. Six personas. A categorized report. Optional seeding of missing boilerplate.
This command i
Alternatives in Security
- Security Scan Report — Generated: 2026-04-10 20:48 UTC Skills scanned: 134 Total findings: 836 Critical: 32 High: 50 Safe skills: 100 18.1k ★
- Skill Audit — Audit codebases for quality, consistency, and broken patterns — use for pre-release or tech debt review 2.8k ★
- Trail Of Bits Claude-code-config — Opinionated production defaults from a top security firm: sandboxing, permissions, hooks, skills, MCP server c 1.6k ★
Full documentation available on GitHub
View Source RepositoryRelated Skills
CI Audit
Stack-aware CI gap detection — audits a project's GitHub Actions workflows against its declared tech stack and
Security Notice Response
Config-driven Claude Code skill: triage a security/malfunction notice for a client website, fix or delegate it
Vibe Secure
Security audit for AI-generated code. Catches hardcoded secrets, injection surfaces, auth gaps, and insecure d
GitHub Release Skill
Safe, automated GitHub releases with supply chain security. Prevents dangerous gh release commands, orchestrat
Audit Extension
Audit an existing Chrome extension across architecture, security, UX, runtime behavior, performance and releas
Compete
Competitive X-Ray — compare your site against any competitor (tech stack, SEO, performance, security)
Related Agents
Fact Assumption Analyst
Performs preliminary legal triage before the main research plan. Identifies missing facts, legal variables the
Skill Boss
Global skills manager Boss for Forge. Maintains the skill registry, attaches default and project-type skill bu
Beardrive Gtm
Veteran commercial-open-source (COSS) operator who reviews BearDrive's go-to-market — someone who has been bot