audit agents

l-agence/agence

Agent

Agent "AGENTS" from l-agence/agence, covering agence agents: quick reference, 1. aider, → generates patch → applies via aider cli, 2. chad and that's a right dog's dinner. batch 'em up...

l-agence/agence

Agent

Agent "ROUTING" from l-agence/agence, covering agence model routing reference (v0.3.0), routing layers (precedence, highest first), operational modes (agenceroutermode), blastradius — code mode sub-tiers (agenceblastradius, v0.5) and @provider.tier routing hint syntax.

hannsxpeter/godaudits

Agent

This pillar covers fixture API contracts.

hannsxpeter/godaudits

Agent

Agent "auth" from hannsxpeter/godaudits, covering scope, context, decisions, rules and workflows.

hannsxpeter/godaudits

Agent

Agent "data" from hannsxpeter/godaudits, covering scope, context, decisions, rules and workflows.

AleksandarBisevac/claude-plugins

Agent

Part of audit

Task executor for the audit orchestrator. Implements exactly ONE manifest task with TDD/regression/gate-only test discipline and reports a structured outcome. No web tools, no nested agents; it never commits and never stashes — git belongs to the orchestrator. Spawned by the audit plugin; not meant for direct use.

AleksandarBisevac/claude-plugins

Agent

Part of audit

Read-only codebase auditor for /audit:init fan-out. Audits ONE subsystem for the requested dimensions and returns a strict-JSON findings array. Mechanically read-only — its tool list has no Edit/Write/Bash, so it cannot modify files or run shell commands. Spawned by the audit plugin; not meant for direct use.

AleksandarBisevac/claude-plugins

Agent

Part of audit

Answers questions about the audit plugin itself — what a config key does, how the plan gate grades, how the capability policy resolves, what the journal can and cannot prove — from the plugin's own README, reference docs, schemas and SECURITY.md, with a citation for every claim. Mechanically read-only (Read/Grep/Glob…

jeremylongshore/dolt-mcp-vcs-plugin

Agent

Part of dolt-mcp-vcs

Use this agent when auditing bead epics for closure drift — finding open epics whose entire child set is already closed (so their GitHub/Plane cluster issue never got the close fan-out), or otherwise reasoning about epic/subtree completion across a bd Dolt database.

davidteren/intent-engineering

Agent

Part of intent-engineering

You review a codebase's structure: are responsibilities placed where they belong, are the framework's design patterns used (and used well), and is the team's declared "ways of working" respected? You complement the convention lens (prose-level idiom) by looking at metrics, collaborators, and pattern signatures. The…

davidteren/intent-engineering

Agent

Part of intent-engineering

You enforce Convention over Configuration and framework idiom. Your job: find places where the code ignores an established convention — of the framework, the language, or (most importantly) this repo — and pays for it with boilerplate, inconsistency, or surprise. Following a convention buys behavior and predictability…

davidteren/intent-engineering

Agent

Part of intent-engineering

You enforce Human Interface Guidelines, Look and Feel, and UX design. Your job: find where a user-facing surface — UI component, flow, screen, or a plan describing one — will confuse, frustrate, or exclude users because a state, convention, or accessibility requirement was skipped. You review the experience decisions…

beriktassuly/solana-audit-skill

Agent

Scope Solana and Anchor audit work, choose minimal references, classify attack surface, and route evidence to the right audit workflow.

beriktassuly/solana-audit-skill

Agent

Convert reviewed Solana audit evidence into precise report-ready findings without overstating unsupported exploit claims.

mcpambassador/server

Agent

Quality assurance reviewer for pull request review, standards enforcement, and code quality assessment.

mcpambassador/server

Agent

Quality assurance and test engineer. Writes tests, validates acceptance criteria, tracks coverage, and performs gap analysis.

mcpambassador/server

Agent

Engineering manager that coordinates all agents, tracks progress, prioritizes work, and surfaces decisions to the human operator.

shihchengwei-lab/separation-and-audit-claude-code

Agent

Code diff review — reads staged diff, returns four categories of suggestions (bug risk / performance / duplication / naming). No pass/fail verdict.

shihchengwei-lab/separation-and-audit-claude-code

Agent

Database migration SQL review — reads staged migration files, returns risk list (breaking change / RLS hole / index / data migration). No pass/fail verdict.

shihchengwei-lab/separation-and-audit-claude-code

Agent

Policy-layer text reviewer. Reads user-visible content (copy, UI strings, error messages, docs) and returns an evidence-level audit against your policy checklist. Runs mechanism recall on Step 0 automatically.

vaquarkhan/compliance-agent-skills

Agent

Simulates a CMMC Level 2 assessment perspective for organizations handling Controlled Unclassified Information (CUI) — not a C3PAO certification or SPRS submission.

vaquarkhan/compliance-agent-skills

Agent

Cross-framework compliance architect for organizations running AI agents and MCP servers under HIPAA, HITECH, FERPA, COPPA, NIST AI RMF, PCI-DSS v4.0, SOC 2, ISO 27001, NIST CSF 2.0, CCPA/CPRA, US state privacy, GDPR, FedRAMP, SOX, CMMC, and/or GLBA/FFIEC obligations simultaneously.

vaquarkhan/compliance-agent-skills

Agent

Simulates a FedRAMP Third Party Assessment Organization (3PAO) perspective for Moderate baseline authorization packages — not an official FedRAMP assessment or Agency ATO.

eternal-roman/ledger

Agent Claude Code

Part of ledger

Strict reviewer for monetary values, accounts, and financial constructs. Ledger kernel + review + security. Use for PRs or pre-commit on value diffs.