Agent skill · security · yonatangross
audit-full
Whole-codebase audit in one 1M-token pass: security, architecture and dependencies with severity-ranked findings. Use before a release or security review. Too big for one pass: use audit-full-mapreduce.
Why this skill is useful
Adds a comprehensive auditing capability with structured reports and cross-file analysis that the AI cannot generate on its own.
What it needs
About 7k tokens when loaded. Last updated 2026-08-06. 215 stars on the source repository.
What this skill does
Full-Codebase Audit Single-pass whole-project analysis leveraging Opus 5.5's extended context window. Loads entire codebases (~50K LOC) into context for cross-file vulnerability detection, architecture review, and dependency analysis. Quick Start Opus 5.5: Uses complexity: max for extended thinking across entire codebases. 1M context (default and maximum on Opus 5.5) enables cross-file reasoning that chunked approaches miss. Set effort explicitly: Opus 5.5's own default is medium (one level below Opus 5's high), and CC 2.1.280+ starts a newly released model at its default rather than an older saved /effort level. Run audits at high; use xhigh for one additional cross-file pattern sweep on the hardest codebases. 1M Context Required: If CLAUDECODEDISABLE1MCONTEXT is set, audit-full cannot perform full-codebase analysis. Check: echo $CLAUDECODEDISABLE1MCONTEXT — if non-empty, either unset it (unset CLAUDECODEDISABLE1MCONTEXT) or use verify for chunked analysis instead. Effort (CC 2.1.111+): xhigh adds a second pass that re-reads cross-module boundaries specifically looking for patterns the first pass normalized over. Reserve xhigh for the hardest codebases (see the Opus 5.5 note above for the default). Silently falls back to high on other models; doctor warns on mismatch. Switching to Opus (CC 2.1.144+): /model now affects the current session only — pick Opus for this audit without it persisting. Press d in the picker only if you want it as the default for new sessions too. --- STEP 0: Verify User Intent with AskUserQuestion BEFORE creating tasks, clarify audit scope using the interactive dialog. Load: Read("references/audit-scope-dialog.md") for the full AskUserQuestion dialog with mode options (Full/Security/Architecture/Dependencies) and scope options (Entire codebase/Specific directory/Changed files). --- CRITICAL: Task Management is MANDATORY --- STEP 1: Estimate Token Budget Before loading files, estimate whether the codebase fits in context. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills yonatangross/audit-full