A review your coding agent can't inflate.
16 areas. One rule: only what's critical.
Ask an agent "what's missing?" and you get an answer shaped by your prompt. Ask again and you get new findings. Every run finds something.
This skill fixes both:
- Same areas, every time. Coverage doesn't depend on how you asked.
- Evidence or it didn't happen. Every status points to code.
- Critical only. Exploitable, or loses data, money, or service.
- Refuted before reported. Findings that don't hold up are dropped.
- Nothing found is a valid answer.
npx skills add CodeSquar/audit
/audit
Run it in a fresh session. Fix what's critical. Stop.
Fits on one screen. So does the skill.