Audit Report
Generate comprehensive security audit report
- Type
- Slash Command
- Repository
- jeremylongshore/tons-of-skills-marketplace
- GitHub stars
- 2.8k
- License
- MIT
- Repo last updated
- Sep 27, 2026
What Audit Report is
Audit Report is a slash command published in the jeremylongshore/tons-of-skills-marketplace repository on GitHub, which has about 2.8k stars. The repository describes itself as: “Model-agnostic agent-skills platform with a harness-free canonical layer, verified adapters, and the ccpi package manager. Explore at tonsofskills.com.”
A slash command is a reusable prompt saved as a markdown file and run by typing its name after a slash. In Claude Code, custom commands have been merged into skills: a file in .claude/commands/ and a skill folder in .claude/skills/ both create the same kind of command, and existing command files keep working.
Audit Report gives you a repeatable way to run the same instructions without retyping them, optionally with arguments.
How to install Audit Report
Claude Code
- Download audit-report.md from the repository.
- Save it to ~/.claude/commands/ (all projects) or .claude/commands/ (one project). As a skill, you can instead save it as ~/.claude/skills/<name>/SKILL.md.
- Run it by typing / followed by its name.
Claude Cowork
- Turn the command into a skill: create a folder with the file saved as SKILL.md and zip it.
- In Customize → Skills, click +, then upload the ZIP.
- Run it from any task with / and the skill name.
New to extending Cowork? Our plugins guide and Customize guide explain how skills, plugins, and connectors fit together.
Inside the source file
An excerpt from plugins/security/security-audit-reporter/commands/audit-report.md, shared under the repository's MIT license. Read the full file on GitHub.
Generate comprehensive security audit reports covering vulnerabilities, compliance status, and remediation roadmap.
Report Components
- Executive Summary
- Overall security posture
- Critical findings count
- Risk score and trend analysis
- Business impact assessment
- Vulnerability Assessment
- All identified vulnerabilities
- CVSS scores and severity ratings
- Affected systems and components
- Exploitation likelihood
- Compliance Status
- OWASP Top 10 coverage
- Regulatory compliance (GDPR, HIPAA, PCI-DSS, SOC2)
- Industry standards adherence
- Gap analysis
- Security Controls
- Authentication mechanisms
- Authorization controls
- Encryption implementation
- Logging and monitoring
- Incident response readiness
- Remediation Roadmap
- Prioritized fix list
- Effort estimates
- Implementation timeline
- Resource requirements
Report Formats
- PDF - Executive presentations
- HTML - Interactive dashboards
- JSON - Automated processing
- Markdown - Documentation
Audit Scope
The audit covers:
- Application security
- Infrastructure security
- Network security
- Data security
- Access control
- Compliance requirements
- Security policies
- Incident response procedures
Best Practices
- Run quarterly security audits
- Track remediation progress
- Share with stakeholders
- Maintain audit history
- Update security policies based on findings
Before you install
- Read the whole file first. Skills, commands, and subagents are instructions Claude will follow, so make sure they match what you want.
- Check which tools, scripts, or MCP servers it uses. Local servers and scripts run with your permissions.
- Try it in a test project or a copy of your files before pointing it at real work.
- Pin the version you tested, and review changes before updating.
- Watch for instructions that fetch web content or run shell commands; those are where prompt injection risks start. See our prompt injection guide.
FAQ
What is Audit Report?
Audit Report is a slash command for Claude Code and Claude Cowork from the jeremylongshore/tons-of-skills-marketplace repository on GitHub. Generate comprehensive security audit report
How do I install Audit Report in Claude Code?
Download audit-report.md from the repository. Save it to ~/.claude/commands/ (all projects) or .claude/commands/ (one project). As a skill, you can instead save it as ~/.claude/skills/<name>/SKILL.md. Run it by typing / followed by its name.
Can I use Audit Report in Claude Cowork?
Turn the command into a skill: create a folder with the file saved as SKILL.md and zip it. In Customize → Skills, click +, then upload the ZIP. Run it from any task with / and the skill name.
Is Audit Report safe to install?
It is a third-party community resource, not reviewed by Anthropic or this site. Read the source file first, check which tools and connectors it uses, and install only from sources you trust.
Similar resources
- Fairdb Emergency Response Emergency incident response procedures for critical FairDB issues Slash Command · jeremylongshore/tons-of-skills-marketplace
- Fairdb Operations Kit Complete operations kit for FairDB PostgreSQL as a Service - VPS setup, PostgreSQL management, customer provisioning, monitoring, and backup automation Plugin · jeremylongshore/tons-of-skills-marketplace
- Fairdb Health Check Comprehensive health check for FairDB PostgreSQL infrastructure Slash Command · jeremylongshore/tons-of-skills-marketplace
- Fairdb Ops Manager Comprehensive operations manager for FairDB managed PostgreSQL service - SOPs, incident response, monitoring, and automation Plugin · jeremylongshore/tons-of-skills-marketplace
- Auth Setup Generate authentication boilerplate with JWT, OAuth, and session support Slash Command · jeremylongshore/tons-of-skills-marketplace
- Audit Codebase PM-focused codebase exploration and capability mapping Slash Command · jeremylongshore/tons-of-skills-marketplace
- Auto Scale Configure auto-scaling policies for applications and infrastructure Slash Command · jeremylongshore/tons-of-skills-marketplace
- Archival Archive old database records with automated retention policies and cold Slash Command · jeremylongshore/tons-of-skills-marketplace