adversarial-workflow-audit

Adversarial Workflow Audit

A multi-pass quality auditing system adapted specifically for manual markdown workflows. Unlike agent skills (which trigger automatically), workflows are manually invoked by users and execute sequentially. This audit ensures they are deterministic, safe, and robust.

When to Load

Load this skill when any of these apply:

• Auditing an entire workflows directory for quality and safety.
• Reviewing a new workflow before finalizing it.
• The user asks for a workflow quality check or playbook review.
• The user says "audit this workflow", "review this runbook", "check my playbook", or "review this slash command".

Adversarial Protocol

This skill follows the standard dual-agent adversarial pattern (Agent A: The Evaluator, Agent B: The Adversarial Tester). For the core pipeline rules, phase definitions, and agent switching protocols, read: ../adversarial-security/references/adversarial-base-protocol.md

Deep References

For the specific audit categories and rubric, read:

• Audit Categories Reference

External Validation (Phase 4)

Phase 4 triggers an independent validation pass using the GitHub CLI (gh copilot). The copilot subcommand is built into modern gh CLI — no separate extension is needed. This provides a fundamentally different model's perspective on workflow quality, catching ambiguous steps and missing safety gates that internal review normalizes.

Prerequisites: gh CLI v2.x+ with gh auth status passing. If gh copilot is not available, skip Phase 4 gracefully and note the skip in the journal entry.

Read references/copilot-usage.md for critical non-interactive execution requirements.

Feedback Loop

Every phase creates a journal entry for future retrieval. Ensure the entry_type and tags map to the protocol table above.

Journal Opt-Out

See ../adversarial-security/references/journal-opt-out.md for instructions on how to handle explicit opt-outs from journaling.