App Audit — Security skill for Claude Code
Grade an existing app against the Mobify Studio House KB and Axiom standards — fan out the specialist auditors, produce a severity-ranked gap report, build a remediation backlog, then fix (safe fixes.
How to install App Audit
Installs to ~/.claude/skills/vmobifystudio-app-dev-team-app-audit/SKILL.md
mkdir -p ~/.claude/skills/vmobifystudio-app-dev-team-app-audit && curl -fsSL https://raw.githubusercontent.com/vmobifystudio/app-dev-team/HEAD/commands/app-audit.md -o ~/.claude/skills/vmobifystudio-app-dev-team-app-audit/SKILL.md Restart Claude Code, or start a new session, for it to be picked up.
What App Audit does
description: Grade an existing app against the Mobify Studio House KB and Axiom standards — fan out the specialist auditors, produce a severity-ranked gap report, build a remediation backlog, then fix (safe fixes automatically, risky changes only with your approval) argument-hint: [dimension or "all" — e.g. security, monetization, ios, android; default = all] allowed-tools: Read, Write, Edit, Glob, Grep, Bash, Task, Agent
/app-audit — Grade the app, then close the gaps
Dimension (opt
Alternatives in Security
- Vuln Scan — Multi-agent security vulnerability sweep — fans out region-scoped hunters, verifies findings, and reports 107 ★
- Audit Psr — Audit PSR compliance 63 ★
- Prowler Studio — Prowler Studio an AI workflow that ensures Claude Code follows Prowler's guardrails to deliver consistent, tes 55 ★
Full documentation available on GitHub
View Source RepositoryRelated Skills
Audit Parity
Run a backend↔frontend capability parity audit and produce a ranked gap backlog
Webdesign
Build a website in the studio house style, or audit one that already exists
Global Audit
Whole-service audit via a parallel fan-out of 11 independent domain LENSES (layers, security/IDOR, state-sync,
Cpv Batch Caching Audit
Fan out cpv-cache-optimizer-agent across every plugin in a marketplace, a list of plugins, or a single plugin.
Cpv Batch Security Audit
Fan out security-only validation across every plugin in a marketplace, a list of plugins, or a single plugin.
Fanout Audit
Audit content for AI search retrievability by simulating query fan-out and checking passage extractability. Ru
Related Agents
Langertha Reviewer
Read-only code reviewer for Langertha — reviews a diff, branch or fix wave against its spec, plan, ADRs and ho
Foley
Backlog triage analyst — stage 1 of the backlog pipeline. Invoke with pre-fetched task data to assess dispatch
Backlog Auditor
Audits the backlog for label hygiene, body shape, dependency integrity, and milestone coherence. Returns a str