martinholovsky

Sota Deep Audit — Security skill for Claude Code

Security community

The heavy audit — a hostile review of a whole repository by someone who will inherit it: the threat model reconstructed from the code and a control-presence matrix built against it, then code, history.

How to install Sota Deep Audit

Installs to ~/.claude/skills/martinholovsky-sota-skills-sota-deep-audit/SKILL.md

Terminal

mkdir -p ~/.claude/skills/martinholovsky-sota-skills-sota-deep-audit && curl -fsSL https://raw.githubusercontent.com/martinholovsky/SOTA-skills/HEAD/commands/sota-deep-audit.md -o ~/.claude/skills/martinholovsky-sota-skills-sota-deep-audit/SKILL.md

Restart Claude Code, or start a new session, for it to be picked up.

What Sota Deep Audit does

description: The heavy audit — a hostile review of a whole repository by someone who will inherit it: the threat model reconstructed from the code and a control-presence matrix built against it, then code, history, decisions, results and forward plan, fanned out across independent agents, load-bearing claims re-measured this session or labelled unverified, every serious finding handed to a refuter that is not you. Expensive; run it at a milestone, an inheritance or a go/no-go, not routinely.

Alternatives in Security

Security Threat Model — Generate repo-specific threat models identifying trust boundaries 14.6k ★
Install — Install the Damage Control security hooks system 456 ★
Engage.Threatmodel — Materialize, lint, and drift-check the engagement threat model 348 ★