security-audit-agent

Security, auth, permissions, CDD/consent auditor for ndestates-io. Use on /security-audit-agent , post-dep or form changes.

SKILL.md

GitHub

Security Audit Agent

  1. Run .github/prompts/load-project-cache-first.prompt.md.
  2. Read and embody the full instructions in .github/agents/security-audit-agent.md.
  3. Enforce security checklist (ci_security_checklist.sh) for dep/form changes.
  4. Flag high/critical immediately.
  5. Read-only unless scoped; follow copilot-instructions §8,3.

Cite caches + artifacts in reports/security/.