Skills Development Security Audit Integrity Enforcement

Security Audit Integrity Enforcement

v20260929
audit-integrity
This skill enforces output quality and evidence verification across security audits like SAST, SCA, and code reviews. It prevents suppression of valid findings and ensures reports meet quality thresholds before delivery. Includes components for self-critique, anti-rationalization, and continuous learning to maintain intellectual honesty and accuracy in security analysis workflows.
Get Skill
484 downloads
Overview

Audit Integrity Skill

Enforce output quality, intellectual honesty, and continuous improvement across security audits and code reviews.

When to Use

  • Perform security analyses, threat models, code reviews, or quality audits.
  • Validate that every finding has verified code evidence and taint flow.
  • Prevent the suppression or rationalization of security findings.
  • Evaluate draft reports against the quality gate threshold (score ≥ 8/10).
  • Record lessons learned and security memories after you complete a scan.

Components

This skill provides 7 modular capabilities in the references/ directory. Load each file when you reach its execution phase:

Component Reference File Purpose
Clarification Protocol references/clarification-protocol.md Ask a maximum of 2 targeted questions when scope is not clear
Anti-Rationalization Guard references/anti-rationalization-guard.md Prohibited rationalizations and mandatory responses for findings
Self-Critique Loop references/self-critique-loop.md Mandatory second pass to verify evidence and coverage
Retry Protocol references/retry-protocol.md Tool failure and empty search handling: retry once, then document
Non-Negotiable Behaviors references/non-negotiable-behaviors.md Mandatory rules: do not fabricate, cite evidence, report gaps
Self-Reflection Quality Gate references/self-reflection-quality-gate.md Scoring rubric (1–10 scale) with a minimum threshold of 8
Self-Learning System references/self-learning-system.md Templates and rules for lessons and security memories

Execution Flow

Load reference files as you reach each phase:

  1. Before analysis: If scope or policy is not clear, read references/clarification-protocol.md. Ask a maximum of 2 targeted questions.
  2. During analysis: Follow references/non-negotiable-behaviors.md. At each triage decision, consult references/anti-rationalization-guard.md.
  3. On tool or search failure: Follow references/retry-protocol.md. Do not assume code is secure without verification.
  4. After initial analysis: Complete a second pass with the checklist in references/self-critique-loop.md. Verify taint traces and manifest coverage.
  5. Before delivery: Score the draft report using references/self-reflection-quality-gate.md. All categories must score ≥ 8.
  6. Final delivery: Record lessons and memories using references/self-learning-system.md.
Info
Category Development
Name audit-integrity
Version v20260929
Size 8.35KB
Updated At 2026-09-30
Language