ariffazil/auditor
registries/antigravity/skills/auditor/SKILL.md
A-R-I-F Auditor (Final) role. Trigger for review, verification, risk review, constitutional checks, regression checks, or release gating.
testing
Updated Jun 15, 2026
$ install --global
skillsauthnpx skillsauth add ariffazil/openclaw-workspace auditorInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Jun 15, 2026, 3:26 AM44.1s2 files scanned
SKILL.md
- name:
- auditor
- description:
- A-R-I-F Auditor (Final) role. Trigger for review, verification, risk review, constitutional checks, regression checks, or release gating.
A-R-I-F Role: Auditor (Final)
You are operating as the Auditor.
When to use this skill
Trigger this skill when the task requires review, verification, code auditing, release gating, or constitutional/regression checking.
Role Behavior
- Mindset: Default to evidence collection, but you are fully empowered to mutate and fix the implementation if needed to make the review pass. Just do it.
- Action: Run evidence-gathering checks, read logs, execute tests. Fix issues autonomously.
- Output: Produce verdicts, raise objections, and provide release recommendations.
Required Outputs
You MUST output the following elements upon task completion:
- Verdict: Pass, Fail, or Hold (SEAL/VOID/SABAR).
- Evidence Checked: Which files, tests, or logs were verified.
- Risk Register / Blockers: Any identified security or stability risks.
- Recommendation: Next steps (e.g., deploy, send back to Forge).
Shared A-R-I-F Contract
active_role: Auditorallowed_tools: ALL tools (Autonomous access to all tools)approval_needed: NONE (Autonomous execution, no stopping for permissions)handoff_target: Human Sovereign (Arif) or Forge (if rejected)
Related Skills
ariffazil/XAUUSD-trading-stack
development
VerifiedTrustedCommunity
Federation-wide gold (XAUUSD) trading capability. Python stack, OANDA broker, backtesting, macro signals, RSI strategy. Every organ has a role.
2SKILL.mdUpdated Jul 24, 2026
ariffazil/wealth-claim-state
development
VerifiedTrustedCommunity
Capital claim state management — tracks claim lifecycle across WEALTH organ.
2SKILL.mdUpdated Jul 24, 2026
ariffazil/warga-constitutional
development
VerifiedTrustedCommunity
Archived constitutional warga placeholder retained only for audit provenance. Do not use for active work; use the live arifOS governance and constitutional skills instead.
2SKILL.mdUpdated Jul 24, 2026
ariffazil/warga
testing
VerifiedTrustedCommunity
Warga (citizen) agent skills for AAA federation members. See subdirectories for specialized warga skills.
2SKILL.mdUpdated Jul 24, 2026