Audit Context Building
Skill ActiveEnables ultra-granular, line-by-line code analysis to build deep architectural context before vulnerability or bug finding.
To enable AI agents to build ultra-granular, bottom-up architectural context for codebases, ensuring a stable and accurate understanding before proceeding to analysis or auditing phases.
Features
- Line-by-line code analysis
- Application of First Principles, 5 Whys, 5 Hows at micro-scale
- Building and maintaining a persistent global mental model
- Explicitly documenting invariants, assumptions, and risks
- Structured analysis format for functions and system flows
Use Cases
- When deep comprehension is needed before bug or vulnerability discovery
- For bottom-up understanding instead of high-level guessing
- Reducing hallucinations, contradictions, and context loss in audits
- Preparing for security auditing, architecture review, or threat modeling
Non-Goals
- Identifying vulnerabilities
- Proposing fixes
- Generating exploit reasoning
- Assigning severity or impact ratings
Workflow
- Perform initial orientation and minimal mapping of modules, entrypoints, actors, and storage.
- Conduct ultra-granular analysis of each non-trivial function, including purpose, inputs, outputs, and block-by-block breakdown.
- Analyze cross-function and external calls as continuous execution flows, treating external calls without available code as adversarial.
- Reconstruct global system understanding by mapping state, invariants, workflows, trust boundaries, and complexity clusters.
- Apply stability and consistency rules, anchoring key facts and updating the model when contradicted.
Trust
- warning:Issues Attention13 issues opened and 4 closed in the last 90 days suggests a low closure rate, indicating potential delays in maintainer response.
Installation
First, add the marketplace
/plugin marketplace add trailofbits/skills/plugin install audit-context-building@trailofbitsQuality Score
Trust Signals
Similar Extensions
Pathfinder
100Map a codebase into feature-grouped flowcharts, identify duplicated concerns across features, and propose a unified architecture. Use when asked to "find the ideal path," unify duplicated systems, or audit architecture before a refactor. Emits a proposed unified flowchart plus per-system /make-plan prompts.
Understand
100Analyze a codebase to produce an interactive knowledge graph for understanding architecture, components, and relationships
Assess Form
99Evaluate a system's current structural form, identify transformation pressure, and classify transformation readiness. Covers structural inventory, pressure mapping, rigidity assessment, change capacity estimation, and readiness classification for architectural metamorphosis. Use before any significant architectural change to understand the starting point, when a system feels stuck without clear reasons, when external pressure from growth or tech debt is mounting, or as periodic health checks for long-lived systems.
V3 Ddd Architecture
100Domain-Driven Design architecture for claude-flow v3. Implements modular, bounded context architecture with clean separation of concerns and microkernel pattern.
Cloud Architect
100Designs cloud architectures, creates migration plans, generates cost optimization recommendations, and produces disaster recovery strategies across AWS, Azure, and GCP. Use when designing cloud architectures, planning migrations, or optimizing multi-cloud deployments. Invoke for Well-Architected Framework, cost optimization, disaster recovery, landing zones, security architecture, serverless design.
API Design Patterns
100Comprehensive API design patterns covering REST, GraphQL, gRPC, versioning, authentication, and modern API best practices