Jstack Audit — Security skill for Claude Code
Run a read-only evidence-bound JStack repository audit.
How to install Jstack Audit
Installs to ~/.claude/skills/jarodfroneman-jstack-jstack-audit/SKILL.md
mkdir -p ~/.claude/skills/jarodfroneman-jstack-jstack-audit && curl -fsSL https://raw.githubusercontent.com/JarodFroneman/jstack/HEAD/prompts/jstack-audit.md -o ~/.claude/skills/jarodfroneman-jstack-jstack-audit/SKILL.md Restart Claude Code, or start a new session, for it to be picked up.
What Jstack Audit does
description: Run a read-only evidence-bound JStack repository audit argument-hint: [SCOPE] [--profile quick|standard|deep|release] [OPTIONS]
Apply the JStack audit workflow to this repository.
Arguments: $ARGUMENTS
Return usage without repository inspection for `help`, `--help`, or `?`. Reject unsupported flags, invalid scopes, and invalid explicit base refs.
Defaults:
- scope: current Git delta for
quick; repository root for other profiles - profile:
standard - focus:
all - f
Alternatives in Security
- Portaljs Check Data Quality — Audit a local or remote tabular file (CSV/TSV) for common data quality issues 2.3k ★
- CodexQB — CodexQB is a Codex plugin for evidence-backed repo comprehension, planning, QA audit, and gated implementation 186 ★
- Open Skill Sunset — Local, read-only audit for stale AGENTS.md, CLAUDE.md, and generic SKILL.md instructions 84 ★
Full documentation available on GitHub
View Source RepositoryRelated Skills
Pizdec
Read-only, evidence-driven security audit skill for AI coding agents.
Repo Audit
Read-only four-phase repository audit covering discovery and mapping, evidence-based severity-rated findings,
Cleanup Repo
Read-only repo audit for stale/orphaned files, tracked cruft, accidentally-committed secrets, empty files, and
Ke Review
Perform an independent read-only review of a change, its requirements, tests, security, and completion evidenc
Audit Subagent Dtd
Send an agent file to subagent-auditor-dtd: contract rules first, then the roster row, role, tools and bound
UX A11y
WCAG 2.1 AA accessibility audit plus common-courtesy checks beyond the spec. Produces findings grouped by WCAG
Related Agents
Habit Judge
Read-only verifier that scores a session, a diff, or a transcript against a habit set and returns an evidence-
Privacy Reviewer
Read-only data-privacy auditor for the forgeward gate. Fires when the diff collects, stores, logs, or transmit
Firebreak Reviewer
Reviews a change set for runaway cost and irreversible real-world harm — a metered operation reachable with no