Autonomous Claude Code plugin that audits a GitHub repo, triages findings, fixes in PRs, and independently reviews before merging.
Skill Claude CodeCodex
Scan the active auto-audit workspace for security vulnerabilities and add any new findings to the queue. Run as part of /auto-audit:start or periodically via /auto-audit:tick rescans. Uses LLM-based code review plus available CLI scanners (npm audit, pip-audit, gitleaks-like regexes).
Skill Claude CodeCodex
Install the auto-audit badges in the target repo. Publishes the live status JSON to the autoaudit/status branch so the dynamic shields.io badge renders, and optionally opens a PR adding the static 'audited by auto-audit' badge to the README. Use after an audit when the user wants visibility in their repo's README.
Skill Claude CodeCodex
Record operator feedback against the active repo's audit so future triager and fixer runs incorporate it. Use when the user says 'don't write that pattern again', 'I reverted that PR because X', 'the triager got this one wrong', or 'remember this for next time'. The reviewer is independent and does NOT read this log …
Skill Claude CodeCodex
Generate a self-contained HTML audit report for the active repo (or a named one). The report includes summary stats, per-finding triage / PoC / fix / review detail, and the full activity log. Use when the user says 'generate a report', 'export findings', 'build the audit summary', 'write up the audit'.
Skill Claude CodeCodex
Resume a stopped or previously-interrupted autonomous audit without re-initialising the workspace. Re-establishes the active repo pointer and kicks off the loop again. Use when the user says 'resume auto-audit', 'continue the audit', or after a session restart.
Skill Claude CodeCodex
Autonomously audit a GitHub repo. Clones the repo, runs a full audit scan (security by default), then kicks off a continuous loop that triages findings, writes proofs of concept, fixes issues in PRs, independently reviews, and merges. Use when the user says things like 'audit my repo', 'scan repo X for security…
Skill Claude CodeCodex
Show the current state of the autonomous audit: active repo, findings breakdown by status, recent activity, next pending finding. Use when the user asks 'what's auto-audit doing?', 'audit status', 'audit progress'.
Skill Claude CodeCodex
Halt the autonomous audit loop. Drops the active-repo pointer so ticks become no-ops, and advises the user to press Esc to cancel the running /loop. Use when the user says 'stop auto-audit', 'halt the audit', 'cancel'.
Skill Claude CodeCodex
Advance the autonomous audit by one finding. Picks the next pending finding, moves it through the next lifecycle stage (triage, PoC, fix, PR, review, merge), and stops. Intended to be called repeatedly by /loop — do not use this directly; use /auto-audit:start instead.