audit-integrity
Shared audit integrity framework for all AppSec agents — enforces output quality, intellectual honesty, and continuous improvement through anti-rationalization guards, self-critique loops, retry protocols, non-negotiable behaviors, self-reflection quality gates (1-10 scoring, ≥8 threshold), and a self-learning system with lesson/memory governance for security analysis agents.
Profile →npx skills add github/awesome-copilot --skill audit-integrity --agent copilot
Same command for any agent — swap --agent for claude-code, codex, cursor.
Weekly change comes from our own snapshots, not the repository page — it measures attention, not adoption.
# Audit Integrity Skill Enforces output quality, intellectual honesty, and continuous improvement across all AppSec agents. ## When to Use - Every security analysis, code review, threat model, or quality scan agent run - Applied automatically as a post-analysis quality gate - Applicable to any agent performing SAST, SCA, threat modeling, or code quality analysis ## Components This skill provides 7 reusable capabilities. Agents apply all 7 unless their scope excludes a specific component. | Component | Reference File | Purpose | |-----------|---------------|---------| | Clarification Protocol | [clarification-protocol.md](references/clarification-protocol.md) | Ask ≤2 targeted questions before analysis when scope is ambiguous | | Anti-Rationalization Guard | [anti-rationalization-guard.md](references/anti-rationalization-guard.md) | Table of prohibited rationalizations with mandatory responses | | Self-Critique Loop | [self-critique-loop.md](references/self-critique-loop.md) | Mandatory second-pass review after initial analysis | | Retry Protocol | [retry-protocol.md](references/retry-protocol.md) | Tool failure handling — retry once, then document | | Non-Negotiable Behaviors | [no
- When to Use
- Components
- Execution Flow
- Agent-Specific Adaptation
- Example extensions per agent type
What does the audit-integrity skill do?
Shared audit integrity framework for all AppSec agents — enforces output quality, intellectual honesty, and continuous improvement through anti-rationalization guards, self-critique loops, retry protocols, non-negotiable behaviors, self-reflection quality gates (1-10 scoring, ≥8 threshold), and a self-learning system with lesson/memory governance for security analysis agents.
How do I install it?
Run `npx skills add github/awesome-copilot --skill audit-integrity --agent claude-code` — it drops the skill into your project so the agent can pick it up. Swap the --agent value for codex, cursor or copilot if you use one of those.
Where does this skill come from?
From github/awesome-copilot, a repository with 37,432 stars. We read it straight from the repository tree rather than a submitted listing, so what you see here is what is actually published.
Is a popular skill a good skill?
Not necessarily. Stars measure attention, not adoption — a repository can trend for a week and be abandoned. That is why we show the weekly change from our own snapshots next to the total, instead of a single flattering number.