Reference Audit — Security skill for Claude Code
Invoke the reference-audit skill defined in this project's pack at guardrails/skills/reference-audit/SKILL.md.
How to install Reference Audit
Installs to ~/.claude/commands/jposluns-grc_library-reference-audit.md
mkdir -p ~/.claude/commands && curl -fsSL https://raw.githubusercontent.com/jposluns/grc_library/HEAD/.claude/commands/reference-audit.md -o ~/.claude/commands/jposluns-grc_library-reference-audit.md Restart Claude Code, or start a new session, for it to be picked up.
What Reference Audit does
Invoke the `reference-audit` skill defined in this project's pack at [`guardrails/skills/reference-audit/SKILL.md`](../../guardrails/skills/reference-audit/SKILL.md). Slash-command entry point is `/reference-audit`; the underlying skill name remains `reference-audit`. This is the cadenced reference-breadth audit between the corpus and the held reference base, in both directions, catching the gate-blind "held but unused" class the SP 800-154 lesson surfaced (an authoritative source sits in the re
Alternatives in Security
- Pal — Multi-model AI integration — chat, debugging, code review, planning, security audit 11.3k ★
- Free Code — The free build of Claude Code 8.1k ★
- Skills Audit Report — Date: 2026-02-15 Auditor: Automated Skill Quality Audit Scope: Recently added skills in business-growth/, fina 5.3k ★
Full documentation available on GitHub
View Source RepositoryRelated Skills
Fluxcd
FluxCD entry point — routes to the right workflow based on what you need. Live cluster issue → structured 5-wo
WordPress Security Testing
Agent skill for systematic source-code security auditing of WordPress plugins — enumerate every entry point, a
Security Playbook
Security skill pack for AI coding agents — behavioral guardrails, OWASP code/LLM rules, static analysis guidan
Skills Janitor
Audit, deduplicate, check, fix, and track usage of your Claude Code skills. 9 slash commands, zero dependencie
Audit Slash Command Dtd
Send a command file to slash-command-auditor-dtd: contract rules C1 to C12 first, then YAML, arguments, tools
Aisecscan
Static security scanner for Claude Code configuration — settings, permissions, hooks, MCP servers, agents/suba
Related Agents
API Review Orchestrator
Entry point for a full API design review. Invoke when the user asks to review, audit, assess, or give feedback
Server Engineer
Specialist for the Node.js server, REST API, WebSocket, and file watcher. Invoke when building or modifying Ex
Scope Audit
SCOPE audit orchestrator — single entry point for the full audit pipeline. Runs Python SCOPE runtime enumerati