Code Audit — Security skill for Claude Code
Adversarial code review tree.
How to install Code Audit
Installs to ~/.claude/skills/skymanbp-cc-tree-code-audit/SKILL.md
mkdir -p ~/.claude/skills/skymanbp-cc-tree-code-audit && curl -fsSL https://raw.githubusercontent.com/skymanbp/cc-tree/HEAD/commands/code-audit.md -o ~/.claude/skills/skymanbp-cc-tree-code-audit/SKILL.md Restart Claude Code, or start a new session, for it to be picked up.
What Code Audit does
description: Adversarial code review tree. Wraps `/cc-tree:tree` with the code-audit preset preselected — finds security / performance / correctness / contract findings a static linter would miss. Every finding carries `file:line` evidence + threat-model context + proposed_fix; hard-banned against NEEDS-MORE-INFO deferrals. 中文触发:对抗式代码审查,找安全 / 性能 / 正确性 / 契约类缺陷。
argument-hint: "
Alternatives in Security
- FastAPI Review — Review a FastAPI application for architecture, async correctness, dependency injection, Pydantic schemas, secu 243.5k ★
- Sanyuan Skills — Expert code review skill: SOLID, security, performance, error handling, boundary conditions 2.7k ★
- Review Artifact — Creates one polished, self-contained HTML artifact from review findings, audit notes, PR feedback, code review 652 ★
Full documentation available on GitHub
View Source RepositoryRelated Skills
Dotnet Review
Multi-agent .NET code review - up to five reviewers in parallel (correctness, performance, security/observabil
Re Audit
Fix-review / re-audit. Takes a prior audit report + the current tree and classifies every prior finding FIXED
Audit With Verification
Run a parallel-review-then-adversarial-verify audit on a URL, feature spec, or code path. Dispatches N reviewe
TypeScript Senior Review
Claude Code plugin: senior TypeScript developer code reviewer. Reviews your TS code across 18 angles — quality
Twin Sparrow Deep Audit
Composite deep audit skill combining expert-engineer, code-quality-skill, and oppus-reasoning-contract for str
Android Audit
Android platform review — Kotlin/Compose correctness, lifecycle, performance
Related Agents
P Code Review Correctness
Invoked by p-code-review to run the correctness / code-quality channel across the entire working tree (no diff
Santa Reviewer
Use this agent for the Santa Method — an adversarial BREAKER + SIMPLIFIER + VERIFIER review that hunts REAL co
Link Rot Scanner
Read-only audit of the repo's docs for dead links: internal relative links, intra-page anchors, cross-tree ref