Can it detect security vulnerabilities?

Yes, it specifically checks for unverified downloads, unsafe temporary file handling, and ensures that secrets like DB passwords are masked in logs.

What is the primary function of hlab-auditor?

It reviews code changes against a specific rulebook (BASELINE.md) to ensure security, architectural compliance, and robustness during the development process.

How does the skill provide feedback?

It generates a structured report with a PASS, FAIL, or PASS_WITH_WARNINGS verdict, listing specific violations and providing code blocks for required fixes.

What architectural rules does it enforce?

It ensures role-specific compliance, such as preventing the 'Executor' from asking user questions and stopping the 'Wizard' from unauthorized package installations.

Horizon Lab Auditor

Name: Horizon Lab Auditor
Author: Hello-Pork-Belly

byHello-Pork-Belly

0•

Security & Testing

Audits code changes for architectural compliance, security risks, and robustness against defined repository baselines.

The hlab-auditor skill serves as an automated gatekeeper for code quality and security within the Horizon Lab ecosystem. It performs rigorous reviews of pull requests to ensure strict adherence to the project's rulebook, checking for architectural integrity, secure handling of secrets and temporary files, and shell script robustness. By providing a clear PASS/FAIL verdict with specific fix suggestions, it streamlines the code review process and prevents common vulnerabilities or architectural drift before they reach production.

Key Features

01Security risk assessment including secret masking and checksum validation

02Detailed PASS/FAIL reports with actionable fix suggestions

03Robustness verification for shell scripts including environment handling

04Automated architecture compliance checks against internal rulebooks

050 GitHub stars

06Enforcement of custom repository baseline rules via docs/BASELINE.md

Use Cases

01Ensuring shell script reliability and best practices in DevOps pipelines

02Pre-merge security and architectural validation of pull requests

03Enforcing organizational standards defined in baseline documentation

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add hello-pork-belly/horizon-lab hlab-auditor

For use in Claude.ai and ChatGPT

Download Skill