Naridon-Inc

Aura — Security skill for Claude Code

Security community

An audit trail for what AI agents changed in your codebase, and why — signed, per commit, at the symbol level.

How to install Aura

This entry records only its repository, not the path inside it, so there is no exact command to give. Open Naridon-Inc/aura and copy the folder into ~/.claude/skills/, or the file into ~/.claude/agents/.

What Aura does

An audit trail for what AI agents changed in your codebase, and why — signed, per commit, at the symbol level.

Alternatives in Security

  • Skills — Trail of Bits Claude Code skills for security research, vulnerability detection, and audit workflows 4k ★
  • Tech Debt Skill — Claude Code skill that produces a thorough, file-cited tech debt audit of an entire codebase 590 ★
  • Engage.Cvediff — Find the canonical fix commit(s) for a CVE across sources, then diff for root cause 348 ★

README

Latest release Apache 2.0 Discussions Rust

Aura

An audit trail for what AI agents changed in your codebase, and why.
Signed, per commit, at the symbol level.

Terminal recording: an intent contract is approved for src/billing.rs with verify_token marked must-preserve, then a commit that deleted verify_token is blocked, naming the caller that would break
The agent said it would tune the retry backoff. It also deleted the token check. The commit does not land.

Quick start

curl -fsSL https://auravcs.com/install.sh | bash   # macOS · Linux · Windows
cd your-repo && aura init                          # installs the git hooks

That is the whole setup. From here every commit is parsed into logic nodes, diffed at the AST level, and recorded with the intent that produced it. Ask the repository about any file, or any line in one, months later:

aura why src/billing.rs
src/billing.rs

  Landed   a81c9e2  3d ago  ·  Ashiq
           fix(billing): stop tripping the Stripe rate limit

  Asked    "payments keep failing at peak, look at the retry path"
           claude · session 4f2a · 3d ago · named by the intent row

  Intent   "switch retry to exponential backoff so we stop tripping the

Related Skills

Diff Audit — Security skill for Claude Code

Diff Audit

PR / commit-scoped differential audit — audits only changed functions (plus 1-hop callers), flags removed secu

Security community
Checkov — Security skill for Claude Code

Checkov

Bootstrap Checkov on a developer laptop, run static or plan-level Terraform security scanning for AWS/Azure/GC

Security community
Git Crusade — Security skill for Claude Code

Git Crusade

Unleash parallel Git Purist agents to audit branches, commits, and worktrees across the codebase. No bad commi

Security community
Audit Pipelines — Security skill for Claude Code

Audit Pipelines

TDD-validated audit-grade decision pipelines - canonical encoding (RFC 8785 JCS), append-only decision logs, f

Security community
GitHub Release Skill — Security skill for Claude Code

GitHub Release Skill

Safe, automated GitHub releases with supply chain security. Prevents dangerous gh release commands, orchestrat

Security community
Review Iac Consistency — Security skill for Claude Code

Review Iac Consistency

Audit infrastructure-as-code for per-environment drift, over-permissive IAM policies, unencrypted resources, a

Security community

Related Agents

Git — Development agent for Claude Code

Git

Isolated executor for the /playbook:commit-and-push and /playbook:create-pull-request commands. Delivers signe

Development community
JS Error Handler Auditor — Security agent for Claude Code

JS Error Handler Auditor

Use this agent when you need to audit a JavaScript codebase for unhandled errors in top-level async operations

Security community
Observability Specialist — Security agent for Claude Code

Observability Specialist

Observability specialist owning audit-log shape, telemetry surfaces, metrics emission, the SLSA provenance + s

Security community