Optional companion, not part of keystone: Cloudflare's security-audit skill (MIT), pinned to a fixed commit. Adds a source-first full-audit mode with coverage ledgers and schema-validated findings; keystone's /cso can hand off to it. Install separately; never auto-enabled.
Plugin security-audit from marketplace keystone in j-loyd/keystone. Commands read from the repo's manifest — 4 days ago.
security-auditSecurity guidance and vulnerability review for codebases, APIs, services, CLI tools, libraries, and daemons. Use for security questions, focused reviews, vulnerability research, security audits, or pen tests. Run the complete workflow only for explicit codebase audit or pen-test requests, full/compr
The keystone plugin: skills (auto-invoked discipline and domain-language, plus user-only workflows like /spec, /implement, /qa, /ship, /cso, /guard) and the instincts/guard/scan/notify/learnings harness hooks.
33 skills · 3 agents · hooks
This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.