Ross ROSS = Recommend OSS · open-source software intelligence for agents

RuoJi6/audit-skills

专注于代码审计skill,最小化轻量化skill,只负责安全边界。 observed · 2026-08-28

github.com/RuoJi6/audit-skills · Python observed · 2026-08-28

Health v2 · maintenance only

73/100

  • Activity 87
  • Release rhythm 89
  • Longevity 15

Flags: no_license

How is this computed?

round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-09-02. Adoption (stars, forks) is never an input.

  • gap_med: 6
  • age_days: 222
  • days_rel: 78
  • days_push: 78
  • n_releases_24m: 10

Full methodology

Adoption not part of the score

1005 stars · 104 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A lightweight Claude/Codex skill package for AI-assisted source code security auditing, covering Java, .NET, and PHP. It provides vulnerability scanning, language references, decompilation guidance, and strict read-only safety boundaries for LLM-driven audits.

Use cases

  • audit source code for SQL injection vulnerabilities with an LLM
  • detect deserialization vulnerabilities in a Java codebase
  • map routes and authentication mechanisms in a repository
  • scan dependencies and components for known CVEs
  • decompile and deobfuscate Java/.NET code during review
  • orchestrate multi-agent vulnerability audits via Codex

When to choose

  • you use Claude Code or Codex and want structured, per-vulnerability-type code audits
  • you need a minimal, read-only audit skill with strict safety boundaries
  • your target codebase is Java, .NET, or PHP

When to avoid

  • you need a standalone SAST scanner that runs without an LLM CLI
  • you require dynamic analysis, fuzzing, or exploit execution
  • you need guaranteed support or a license (none is provided)

Facets

plugin · maturity active

security vulnerability-scanning reverse-engineering developer-tools security developer-tools penetration-testing cli python cross-platform code-audit claude-skills llm-agent sast java dotnet php decompilation sql-injection deserialization

1 source

Member repositories

RepositoryRoleHealth v2
RuoJi6/audit-skillsmain73

For agents

markdown · JSON · MCP: product_card(name="RuoJi6/audit-skills")

Data as of 2026-08-30T08:39:29.467469+00:00 · Report a problem