How does the Security Auditor minimize false positives?

The skill includes a mandatory refutation step for every finding, requiring the AI to look for existing constraints or safety mechanisms that would prevent an exploit before confirming it.

Can this skill identify logical vulnerabilities?

Yes. Unlike simple pattern matchers, this skill analyzes state mutations and system invariants to find complex logic flaws and unauthorized state transitions.

Does it support specific industry standards?

Yes, during the Map phase, it identifies core standards used in the codebase and can generate specific security checklists to guide the subsequent audit process.

What is the Map & Probe methodology?

Map & Probe is a two-phase audit strategy where Claude first builds a structural inventory (Map) of the system before conducting a deep, path-by-path analysis (Probe) to find exploitable bugs.

Security Auditor

Name: Security Auditor
Author: Artifex1

byArtifex1

•

Security & Testing

Performs interactive source code security audits using a structured Map & Probe methodology to identify and verify vulnerabilities.

The Security Auditor skill enables Claude to conduct rigorous, multi-phase security reviews of any codebase. By following the Map & Probe methodology, it first creates a structural inventory of the system—identifying components, state variables, and call chains—before systematically analyzing execution paths for exploitable flaws. This skill is specifically designed to uncover complex logical vulnerabilities, broken invariants, and unauthorized access vectors, providing a detailed attack story and mitigation strategy for every confirmed finding.

Key Features

01Structured Map & Probe methodology for comprehensive audit coverage

02Mandatory vulnerability refutation to ensure high-confidence findings

03Interactive path-by-path deep analysis with user checkpoints

043 GitHub stars

05Automated call chain analysis and structural system mapping

06Standard-specific security checklists for core codebase protocols

Use Cases

01Performing a deep security review of a new or unfamiliar codebase

02Identifying edge-case vulnerabilities in complex state-management logic

03Hardening applications against external threats by verifying system invariants

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add artifex1/auditor-addon security-auditor

For use in Claude.ai and ChatGPT

Key Features

01Structured Map & Probe methodology for comprehensive audit coverage

02Mandatory vulnerability refutation to ensure high-confidence findings

03Interactive path-by-path deep analysis with user checkpoints

043 GitHub stars

05Automated call chain analysis and structural system mapping

06Standard-specific security checklists for core codebase protocols

Use Cases

01Performing a deep security review of a new or unfamiliar codebase

02Identifying edge-case vulnerabilities in complex state-management logic

03Hardening applications against external threats by verifying system invariants

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add artifex1/auditor-addon security-auditor

For use in Claude.ai and ChatGPT