trackbed:code:audit-security
Audit a repository's security posture and attack surfaces before remediation, producing an evidence-ranked report with coverage gaps.
/trackbed:code:audit-security [--output <repo-relative-path>]- Invocation: User
- Hosts: Claude Code, Codex (
$trackbed:code:audit-securityin Codex) - Category: Audits
- Source:
trackbed/skills/code:audit-security/SKILL.md
Description
Section titled “Description”Audit a repository's security posture before remediation by inventorying attack surfaces and trust boundaries across code, identity, data, CI/CD, infrastructure, integrations, dependencies, secrets, and agent or LLM tooling. Produces a secret-safe, evidence-ranked report with coverage gaps and remediation routes. Use for whole-repository posture or threat-surface audits. Not for fixes, dependency-only audits, author-time hardening, penetration tests, compliance claims, or PR-diff review.
Related
Section titled “Related”- Refers to:
trackbed:code:harden-security,trackbed:deps:audit - Agents:
trackbed:security-reviewer