Search Results for "audit"

security-audit is a coding-agent skill for running structured security audits on software repositories. It organizes the audit into multiple phases so the agent does not simply search randomly for vulnerabilities. The workflow begins with reconnaissance, then moves into parallel hunting across attack classes such as injection, access control, business logic, cryptography, feature abuse, and chained attacks.

...It explains core building blocks such as scheduling, worktrees, skills, plugins, connectors, sub-agents, and persistent memory or state. The repository includes production loop patterns, quickstarts, starters, checklists, safety notes, and real-world stories. It also provides CLI tools such as loop-audit, loop-init, and loop-cost to scaffold, evaluate, and estimate agent loop workflows.

Ponytail is an AI-agent ruleset and plugin system that pushes coding assistants toward simpler, smaller, and less over-engineered solutions. It is built around the idea that the best code is often the code that does not need to be written. Before generating new code, it encourages the agent to check whether the feature is necessary, whether the standard library already solves it, whether the platform has a native capability, or whether an existing dependency can do the job. The project...

BuilderIO Skills is a collection of small, composable skills for coding agents. It is made for teams that want agents to perform better in planning, review, orchestration, validation, documentation discipline, and clear communication. Instead of acting like a heavy process framework, it lets teams install only the skills they need and adapt them to their project. The catalog includes tools for visual planning, visual PR recaps, agent audits, plan comparison, autonomous execution, model...

...Lastest ships three diff engines side-by-side — pixel (pixelmatch), structural (SSIM), and perceptual (Butteraugli) — so flaky pixel diffs stop crying wolf. A review dashboard tracks baselines, approvals, and audit history. Run it via Docker on your own infrastructure for unlimited screenshots and full data residency, or run on Lastest Cloud for managed CI runners. Built for solo founders, devs doing QA without a QA team, and SaaS teams that need an Applitools-class alternative without the $699+/mo invoice or the data-exfiltration problem.