lugassawan

Audit Codebase — Security skill for Claude Code

Security community

Cold-start, time-boxed, multi-domain audit sweep — surfaces ranked findings with reasoning chains across security, performance, reliability, tooling, and testing.

How to install Audit Codebase

Installs to ~/.claude/skills/lugassawan-swe-workbench-audit-codebase/SKILL.md

Terminal

mkdir -p ~/.claude/skills/lugassawan-swe-workbench-audit-codebase && curl -fsSL https://raw.githubusercontent.com/lugassawan/swe-workbench/HEAD/commands/audit-codebase.md -o ~/.claude/skills/lugassawan-swe-workbench-audit-codebase/SKILL.md

Restart Claude Code, or start a new session, for it to be picked up.

What Audit Codebase does

description: Cold-start, time-boxed, multi-domain audit sweep — surfaces ranked findings with reasoning chains across security, performance, reliability, tooling, and testing argument-hint: "[--time-box ] [--scope ] [--depth ] [--top-n ] [optional ticket ref]"

Cold-start audit of this codebase across multiple domains.

Step 1 — Parse arguments

From `$ARGUMENTS`, extract:

--time-box — default 30m. Any trailing m/h suffix

Alternatives in Security

Migration Agent — Plans a token migration (format, tool, naming or tier): chains token-audit and naming-audit, builds the transf 194 ★
Vuln Scan — Multi-agent security vulnerability sweep — fans out region-scoped hunters, verifies findings, and reports 107 ★
Audit Ddd — DDD architecture audit with pattern recommendations 63 ★