martinholovsky

Sota Audit — Security skill for Claude Code

Security community

Audit this codebase against the library — agree the scope first, route from the surfaces rather than from whatever happened to get loaded, walk each skill's Audit checklist item by item, ask the quest.

How to install Sota Audit

Installs to ~/.claude/skills/martinholovsky-sota-skills-sota-audit/SKILL.md

Terminal

mkdir -p ~/.claude/skills/martinholovsky-sota-skills-sota-audit && curl -fsSL https://raw.githubusercontent.com/martinholovsky/SOTA-skills/HEAD/commands/sota-audit.md -o ~/.claude/skills/martinholovsky-sota-skills-sota-audit/SKILL.md

Restart Claude Code, or start a new session, for it to be picked up.

What Sota Audit does

description: Audit this codebase against the library — agree the scope first, route from the surfaces rather than from whatever happened to get loaded, walk each skill's Audit checklist item by item, ask the questions that need a decision, then fix what you agree to. Run it when a piece of work is finished, or on arriving in a codebase you did not write.

Audit this codebase against the library's rules — how far they were applied, not how good the code feels.

It is the third position in

Alternatives in Security

Skills Audit Report — Date: 2026-02-15 Auditor: Automated Skill Quality Audit Scope: Recently added skills in business-growth/, fina 5.3k ★
MCP Security Checklist (SlowMist) — Comprehensive checklist: input validation, rate limiting, RBAC, credential management, container hardening 819 ★
OpenTag — Open-source, channel-native agent gateway for Slack 499 ★