audit

Audit Orchestrator

Dispatch specialized audit agents in parallel and merge their reports into one unified audit report with a Grand Summary.

Hard Rules

1. Dispatch all selected agents in parallel — a single message with multiple Agent tool calls.
2. Only dispatch agents that exist in the project's .claude/agents/ directory. Skip unavailable agents with a note — never invent results for an agent that did not run.
3. Quote each agent's verdicts verbatim: audit-frontend / audit-backend / audit-infra each return exactly 12 checks with per-check PASS/WARN/FAIL plus notes; security-scanner returns findings with CRITICAL/WARNING/SUGGESTION. Never relabel one enum as the other — the only cross-mapping allowed is the Section Verdict table in Step 6.
4. Emit the Grand Summary ONLY after every dispatched agent has returned or its section is explicitly marked SKIPPED.
5. Grand Summary counts are copied from each agent's own Summary: line — each dispatched auditor row must sum to 12; the Total row must equal the column sums.
6. The audit is read-only — never modify project files.
7. Unrecognized scope argument → run all and state unrecognized scope '<arg>' — defaulted to all in the report header.

Steps

1. Parse scope and mode

Consume $ARGUMENTS:

Arguments	Action
contain --health	Health mode → Step 2
frontend | backend | infra | security | all	That scope → Step 3
empty	Scope all → Step 3
anything else	Scope all + header note (Hard Rule 7) → Step 3

Done when: exactly one scope, or health mode, is selected.

2. Health mode (only when --health)

Dispatch ONLY the health-checker agent (skip frontend/backend/infra/security audits) with:

Run all your health checks against the project codebase and emit your Project Health Dashboard.

Output health-checker's own Output Contract verbatim — the Project Health Dashboard block. The unified template below does NOT apply to health mode. If health-checker is not in .claude/agents/, report "health-checker unavailable — cannot run health mode" and stop.