Can this skill handle custom architectural rules?

Yes, it is designed to read steering files like 'principles.md' and 'tech.md' from your repository to ensure all code changes align with your specific standards.

What happens to the audit documentation files after processing?

Files are renamed with an '_OK' suffix if successfully implemented and validated, or a '_SKIP' suffix if the change was deemed unnecessary, maintaining a clear historical record.

How does the skill decide between fixing or skipping an audit finding?

The skill evaluates the finding's validity, current relevance to the codebase, and whether the proposed remediation is proportional or overengineered before proceeding with implementation.

Does it support automated testing for the fixes it applies?

Absolutely. It prioritizes running the validation commands specified within the audit artifact and adds targeted tests if existing coverage is insufficient.

Audit Implementer

Name: Audit Implementer
Author: madebymlai

bymadebymlai

0•

安全与测试

Automates the implementation and validation of security and architectural audit findings into production-ready code.

The Audit Implementer skill streamlines the transition from audit writeups to verified code changes by automating the processing of artifacts within your documentation directory. It intelligently evaluates findings to determine if a fix is valid or overengineered, ensuring that only high-value remediations are applied. By strictly following your project's steering principles and technical constraints, it ensures that every change is architecturally sound, properly validated with targeted tests, and documented through automated Git workflows and artifact renaming.

主要功能

01Intelligent evaluation logic to fix or skip findings based on impact and scope

02Strict alignment with project-specific architectural and technical steering documents

030 GitHub stars

04Automated processing of audit artifacts from defined documentation paths

05Standardized Git workflow with deterministic commit messages and file status tracking

06Automated validation using artifact-provided commands and targeted testing

使用场景

01Automating the remediation workflow for technical debt documented in audit folders

02Systematically applying security patches identified during internal or external audits

03Executing large-scale architectural refactors while maintaining compliance with project principles

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add madebymlai/spec-context-mcp audit-implementer

For use in Claude.ai and ChatGPT

主要功能

01Intelligent evaluation logic to fix or skip findings based on impact and scope

02Strict alignment with project-specific architectural and technical steering documents

030 GitHub stars

04Automated processing of audit artifacts from defined documentation paths

05Standardized Git workflow with deterministic commit messages and file status tracking

06Automated validation using artifact-provided commands and targeted testing

使用场景

01Automating the remediation workflow for technical debt documented in audit folders

02Systematically applying security patches identified during internal or external audits

03Executing large-scale architectural refactors while maintaining compliance with project principles

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add madebymlai/spec-context-mcp audit-implementer

For use in Claude.ai and ChatGPT