Agent skill · security · github
audit-integrity
Shared audit integrity framework for all AppSec agents — enforces output quality, intellectual honesty, and continuous improvement through anti-rationalization guards, self-critique loops, retry protocols, non-negotiable behaviors, self-reflection quality gates (1-10 scoring, ≥8 threshold), and a self-learning system with lesson/memory governance for security analysis agents.
Why this skill is useful
Adds 7 executable protocols and frameworks that enhance the quality and integrity of security analysis outputs.
What it needs
About 2k tokens when loaded. Last updated 2026-08-07. 37,534 stars on the source repository.
What this skill does
Audit Integrity Skill Enforces output quality, intellectual honesty, and continuous improvement across all AppSec agents. When to Use Every security analysis, code review, threat model, or quality scan agent run Applied automatically as a post-analysis quality gate Applicable to any agent performing SAST, SCA, threat modeling, or code quality analysis Components This skill provides 7 reusable capabilities. Agents apply all 7 unless their scope excludes a specific component. Component Reference File Purpose ----------- --------------- --------- Clarification Protocol clarification-protocol.md Ask ≤2 targeted questions before analysis when scope is ambiguous Anti-Rationalization Guard anti-rationalization-guard.md Table of prohibited rationalizations with mandatory responses Self-Critique Loop self-critique-loop.md Mandatory second-pass review after initial analysis Retry Protocol retry-protocol.md Tool failure handling — retry once, then document Non-Negotiable Behaviors non-negotiable-behaviors.md Hard rules: never fabricate, always cite evidence, report gaps Self-Reflection Quality Gate self-reflection-quality-gate.md 1–10 scoring rubric with ≥8 threshold per category Self-Learning System self-learning-system.md Lesson/Memory templates and governance rules Execution Flow 1. Before analysis: Apply Clarification Protocol if scope is ambiguous 2. During analysis: Apply Anti-Rationalization Guard at every decision point 3. After initial pass: Execute Self-Critique Loop (mandatory second pass) 4. On tool failure: Apply Retry Protocol 5. Before delivery: Run Self-Reflection Quality Gate (all categories must score ≥8) 6. After delivery: Create Lessons/Memories for novel findings, false positives, or methodology gaps (see Self-Learning System) Agent-Specific Adaptation Each agent customizes the Self-Critique Loop checklist and Self-Reflection Quality Gate categories to match its domain. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills github/audit-integrity