Skip to content
Back to skills

Audit Scope

ASecurity

What the pm goal audit must not redo, so it stays a paper check of records. Use when you are about to run tests, open a PR head, re-verify QA, check CI or touch git during a goal audit.

  • 8 stars
  • 0 votes
  • 0 copies
  • 0 views
  • Added November 5, 2026
ai-agentsgogitsecurity

Security analysis

A100/100

Scanned November 5, 2026

npx -y skills add volekerb/hivemill --skill audit-scope --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Audit Scope?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Audit Scope
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/volekerb-audit-scope/badge)](https://www.skillsdirectory.com/skills/volekerb-audit-scope)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: audit-scope
description: What the pm goal audit must not redo, so it stays a paper check of records. Use when you are about to run tests, open a PR head, re-verify QA, check CI or touch git during a goal audit.
---

# Audit scope: what the audit does NOT redo

The audit reads records (DB, `gh pr view`, `git log`, `git show`). If you feel the need to do any of these, stop.

1. Run the test suite or the build, at any SHA.
2. Re-run QA's per-criterion commands for a criterion QA PASSed with evidence. If the evidence is missing or hand-waved, file a follow-up or reopen; do not re-verify.
3. Check out a PR head, or check a head-SHA binding.
4. Review a diff for correctness, security or style (the reviewer's job).
5. Check CI status, mergeability or required checks (the judge gate does this).
6. Record any verdict (`factory verdict`/`factory judge` stay qa/reviewer/judge only) or merge or reject a PR.
7. Reopen a merged task to send it back to a coder. Merged work only gets a follow-up task.
8. Touch code, git (beyond read-only log, diff and show), worktrees or branches.

If evidence is missing or hand-waved, file a follow-up or reopen a non-PR task. Do not re-verify.

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

View all in ai-agents →

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.