audit-integrity

Topics in the source

• Audit Integrity Skill
• When to Use
• Components
• Execution Flow
• Agent-Specific Adaptation
• Example extensions per agent type

Enforces output quality, intellectual honesty, and continuous improvement across all AppSec agents. Every security analysis, code review, threat model, or quality scan agent run Applied automatically as a post-analysis quality gate Applicable to any agent performing SAST, SCA, threat modeling, or code quality analysis This skill provides 7 reusable capabilities. Agents apply all 7 unless their scope excludes a specific component. | Component | Reference File | Purpose | |-----------|---------------|---------| | Clarification Protocol | clarification-protocol.md | Ask ≤2 targeted questions before analysis when scope is ambiguous | | Anti-Rationalization Guard | anti-rationalization-guard.md | Table of prohibited rationalizations with mandatory responses | | Self-Critique Loop | self-critique-loop.md | Mandatory second-pass review after initial analysis | | Retry Protocol | retry-protocol.md | Tool failure handling — retry once, then document | | Non-Negotiable Behaviors | non-negotiable-behaviors.md | Hard rules: never fabricate, always cite evidence, report gaps | | Self-Reflection Quality Gate | self-reflection-quality-gate.md | 1–10 scoring rubric with ≥8 threshold per category |

This is an excerpt. Refer to the complete source and its current requirements.