cuioss/persona-auditor
marketplace/bundles/plan-marshall/skills/persona-auditor/SKILL.md
Audit persona that composes other personas as evaluation lenses across a wide scope
$ install --global
skillsauthnpx skillsauth add cuioss/plan-marshall persona-auditorInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Jun 24, 2026, 3:14 AM93.3s1 file scanned
SKILL.md
- name:
- persona-auditor
- description:
- Audit persona that composes other personas as evaluation lenses across a wide scope
- user-invocable:
- false
- mode:
- knowledge
- implements:
- persona
- composes:
- [plan-marshall:persona-implementer, plan-marshall:persona-module-tester, plan-marshall:persona-integration-tester, plan-marshall:persona-documenter, plan-marshall:persona-security-expert]
- priming_preamble:
- Adopt an auditor's stance: survey completely, grade to the floor, and name what was not covered.
Persona: Auditor
REFERENCE MODE: This skill is a persona shell. It declares the auditor evaluator identity and the composition it resolves to; it carries no executable workflow of its own.
The auditor is a meta/evaluator persona — it has no work-activity profile of its own. It composes other personas as evaluation lenses to survey a wide scope for compliance, recurring patterns, and coverage gaps. Because it owns no primary work-activity profile, it omits the profiles: field entirely.
Composition
The persona resolver (manage-personas resolve) flattens this persona's composition DAG into a deduped skills[]:
- Base —
plan-marshall:persona-plan-marshall-agent(the unconditional foundational base every persona inherits). - Composed personas (lenses) — the work personas whose standards the auditor reads through, declared in the
composes:frontmatter (persona-implementer,persona-module-tester,persona-integration-tester,persona-documenter,persona-security-expert); the resolver recurses into each composed persona's refs and profiles, then dedups.
Profiles
None. A meta/evaluator persona that composes other personas as lenses omits the profiles: field — it is never reverse-looked-up from a task's work-activity profile.
Related Skills
cuioss/parse-rewrite-log
development
VerifiedTrustedCommunity
Domain-owned OpenRewrite log-line finding parser for the java-cui domain — parses the
5SKILL.mdUpdated Jul 28, 2026
cuioss/search-markers
development
VerifiedTrustedCommunity
Domain-owned OpenRewrite marker detection for the java-cui domain — scans Java/Kotlin sources for cui-rewrite TODO markers, categorizes them by recipe, and fails the gate on any detected marker
5SKILL.mdUpdated Jul 23, 2026
cuioss/manage-build-server
development
VerifiedTrustedCommunity
Operator control surface for the marshalld build server — enrol/drop a project in the machine-global registry (the opt-in enable signal and anti-laundering wall), manage the daemon lifecycle (start, stop, drain, status, install, upgrade) version-pinned to the verified bundle copy, and inspect the daemon's per-project interaction-audit log (read-only)
5SKILL.mdUpdated Jul 19, 2026
cuioss/build-server-client
tools
VerifiedTrustedCommunity
The tiny build-consumption client for the marshalld build server — submit a build job, bounded long-poll for its result, ping the daemon identity, and preflight registry-plus-liveness in one call; consumption only, never provisioning or enrolment
5SKILL.mdUpdated Jul 19, 2026