Audit

A comprehensive security-focused code review skill for analyzing pull requests, commits, and diffs. It uses git history for context, calculates blast radius of changes, checks test coverage, performs adversarial vulnerability analysis, and generates detailed markdown security reports with findings and recommendations.

This skill provides comprehensive security auditing guidelines for Substrate/FRAME blockchain runtime modules (pallets). It documents 7 critical vulnerability patterns including arithmetic overflow, panic DoS, incorrect weights, and origin validation issues, with detection patterns, mitigations, and testing recommendations.

Create or refine a concise, normative security policy ("Blue Book") for sensitive applications. Use when users need a threat model, data classification rules, auth/session policy, logging and audit requirements, retention/deletion expectations, incident response, or security gates for apps handling PII/PHI/financial data.