Best Audit agent skills
Systematic review passes over code, configuration or performance to surface defects and risky settings. The 12 highest-ranked of the 12 agent skills tagged Audit in the Onei AI catalogue.
Everything tagged Audit: apps, skills and MCP servers
-
by Trail of Bits
Trail of Bits' security review skill for PRs, commits, and diffs: risk-first analysis with git history, blast radius, and honest coverage limits.
-
by Trail of Bits
Compiles cryptographic code and reads the emitted assembly for variable-time instructions, then triages which flagged operations actually touch secrets.
Also: AppSec, Security, Static Analysis · Copied 1 time
-
by Sentry
Audit GitHub Actions workflows for the exploitation patterns that leak secrets or allow code execution from a fork.
Also: Security · Copied 1 time
-
by Trail of Bits
Finds secrets left in memory in C, C++ and Rust — including wipes the compiler deleted — and requires IR or assembly evidence before calling one optimized away.
Also: AppSec, Security, Static Analysis
-
by NVIDIA
Generates or refreshes an NVIDIA governance skill card for an existing agent skill — discovers assets, renders a deterministic markdown card, and blocks submission while human-review markers remain.
Also: Compliance
-
by Firebase
Firebase's official red-team skill for auditing Firestore and Cloud Storage security rules — hunting privilege escalation, create/update bypasses and resource-exhaustion holes.
Also: Security
-
by Trail of Bits
Trail of Bits' skill for writing production-quality Semgrep rules — pattern design, taint mode for data-flow bugs, and mandatory test-driven validation.
Also: Security, Static Analysis
-
by Trail of Bits
Trail of Bits' CodeQL skill: build databases, run taint-tracking and data-flow queries across eight languages, and model project-specific sources and sinks.
Also: Security, Static Analysis
-
by Sentry
Audit the changes on your current branch for bugs, security vulnerabilities, and quality problems before you push.
Also: Security
-
by Pillar Security
Pillar Security's SAIL V2 framework as an agent skill: a 91-risk catalogue across seven lifecycle phases, for AI security gap assessments, roadmaps, and ISO 42001 / EU AI Act compliance checklists.
Also: Compliance, Security
-
by Trail of Bits
Audits npm, PyPI and Go dependencies for advisories, abandoned upstreams, publisher concentration and install-time scripts — measured by scripts, not estimated.
Also: AppSec, Compliance, Security
-
by Cloudflare
Audit Core Web Vitals with real measurements via Chrome DevTools — then fix what the numbers actually point to.
How this list is ranked
Ranked by 20 points for an editor's pick, plus 4 points per copy of the install command or SKILL.md up to 10, plus a point per 5 page views up to 100; ties go to the most recently updated. Discontinued skills are never ranked.