App Audit — Security skill for Claude Code
Grade an existing app against the Mobify Studio House KB and Axiom standards — fan out the specialist auditors, produce a severity-ranked gap report, build a remediation backlog, then fix (safe fixes.
How to install App Audit
Installs to ~/.claude/skills/vmobifystudio-app-dev-team-app-audit/SKILL.md
mkdir -p ~/.claude/skills/vmobifystudio-app-dev-team-app-audit && curl -fsSL https://raw.githubusercontent.com/vmobifystudio/app-dev-team/HEAD/commands/app-audit.md -o ~/.claude/skills/vmobifystudio-app-dev-team-app-audit/SKILL.md Restart Claude Code, or start a new session, for it to be picked up.
What App Audit does
description: Grade an existing app against the Mobify Studio House KB and Axiom standards — fan out the specialist auditors, produce a severity-ranked gap report, build a remediation backlog, then fix (safe fixes automatically, risky changes only with your approval) argument-hint: [dimension or "all" — e.g. security, monetization, ios, android; default = all] allowed-tools: Read, Write, Edit, Glob, Grep, Bash, Task, Agent
/app-audit — Grade the app, then close the gaps
Dimension (opt
Alternatives in Security
- Cve MCP Server — Production-grade MCP server giving Claude 27 security intelligence tools across 21 APIs — CVE lookup, EPSS sco 1.2k ★
- /chain — Build an A→B→C exploit chain for higher severity and payout 927 ★
- Sail Skill — SAIL V2 (Secure AI Lifecycle) as an agent skill — the full 91-risk catalog for AI/agent gap assessments, secur 122 ★
Full documentation available on GitHub
View Source RepositoryRelated Skills
Webdesign
Build a website in the studio house style, or audit one that already exists
Cpv Batch Caching Audit
Fan out cpv-cache-optimizer-agent across every plugin in a marketplace, a list of plugins, or a single plugin.
Cpv Batch Security Audit
Fan out security-only validation across every plugin in a marketplace, a list of plugins, or a single plugin.
Ship Check
End-of-session production audit with auto-merge. Reconstructs session intent, then RUNS the full review chain
Engineering Audit
Full-spectrum engineering health audit: scores Maintainability, Security, Testing, Architecture, Documentation
Diagnose Conversion Gap
Funnel teardown — stage-by-stage CVR vs benchmarks, $ leak waterfall, 40/40/20 root-cause (Audience/Offer/Copy
Related Agents
Foley
Backlog triage analyst — stage 1 of the backlog pipeline. Invoke with pre-fetched task data to assess dispatch
Agent Chadi
Industry-grade OpenCode all-rounder — your primary agent. 5-gate hybrid workflow with contract-first wave fan-
Backlog Priorities
Curate a ranked shortlist from open GitHub issues based on the user's current intent — tech debt, maintenance,