Naridon-Inc

Aura — Security skill for Claude Code

Security community

An audit trail for what AI agents changed in your codebase, and why — signed, per commit, at the symbol level.

How to install Aura

This entry records only its repository, not the path inside it, so there is no exact command to give. Open Naridon-Inc/aura and copy the folder into ~/.claude/skills/, or the file into ~/.claude/agents/.

What Aura does

An audit trail for what AI agents changed in your codebase, and why — signed, per commit, at the symbol level.

Alternatives in Security

Skills — Trail of Bits Claude Code skills for security research, vulnerability detection, and audit workflows 4k ★
Commit Hook Checklist — Audit commit-hook automation as gates against AI slop and broken commits (Node.js, Go, polyglot) 168 ★
Mobile Review — Senior-level deep review of an existing mobile app 107 ★

README

Aura

An audit trail for what AI agents changed in your codebase, and why.
Signed, per commit, at the symbol level.

Terminal recording: an intent contract is approved for src/billing.rs with verify_token marked must-preserve, then a commit that deleted verify_token is blocked, naming the caller that would break
The agent said it would tune the retry backoff. It also deleted the token check. The commit does not land.

Quick start

curl -fsSL https://auravcs.com/install.sh | bash   # macOS · Linux · Windows
cd your-repo && aura init                          # installs the git hooks

That is the whole setup. From here every commit is parsed into logic nodes, diffed at the AST level, and recorded with the intent that produced it. Ask the repository about any file, or any line in one, months later:

aura why src/billing.rs

src/billing.rs

  Landed   a81c9e2  3d ago  ·  Ashiq
           fix(billing): stop tripping the Stripe rate limit

  Asked    "payments keep failing at peak, look at the retry path"
           claude · session 4f2a · 3d ago · named by the intent row

  Intent   "switch retry to exponential backoff so we stop tripping the