Skip to content
Skill

security-audit-rlm

by mitkox

AI Summary

Use this skill to operate as a tool-driven RLM workflow for large repositories. 1. Verify prerequisites: 2. Run a baseline audit:

Install

Copy this and paste it into Claude Code, Cursor, or any AI assistant:

I want to install the "security-audit-rlm" skill in my project.

Please run this command in my terminal:
# Install skill into your project
mkdir -p .claude/skills/megacode && curl --retry 3 --retry-delay 2 --retry-all-errors -o .claude/skills/megacode/SKILL.md "https://raw.githubusercontent.com/mitkox/megacode/main/SKILL.md"

Then restart Claude Code (or reload the window in Cursor) so the skill is picked up.

Description

Run and troubleshoot privacy-preserving, local DSPy RLM security audits for large legacy .NET codebases. Use when asked to scan repositories for vulnerabilities, tune RLM/tool limits, fix truncation/stall issues, or produce actionable markdown/json audit outputs without loading entire codebases into model context.

Security Audit RLM

Use this skill to operate audit.py as a tool-driven RLM workflow for large repositories. Repository: https://github.com/mitkox/megacode

Execute

• Verify prerequisites: • deno --version • model endpoint is reachable (default http://localhost:8000/v1) • Run a baseline audit: • AUDIT_VERBOSE=1 python audit.py --source-root <repo-path> • Confirm outputs: • security_audit_report.md • security_audit_metadata.json • security_audit_manifest.jsonl

Tune For Large Legacy Repos

• Lower planner churn: • --max-iterations 8..12 • --rlm-max-llm-calls 60..100 • Bound REPL noise: • --rlm-max-output-chars 15000..30000 • Bound tool payloads: • --tool-max-lines 200..400 • --tool-max-chars 20000..40000 • --search-max-files 800..2000 • --search-max-matches 200..600 • Control runtime: • --timeout-seconds 600..1800 • --retries 1..2

Operating Rules

• Keep analysis local when privacy constraints require it. • Use RLM tool access, not full-context repository injection. • Keep intermediate output concise and deterministic. • Prioritize high-severity findings with file/line evidence and concrete fixes.

Discussion

0/2000
Loading comments...

Health Signals

MaintenanceCommitted 4mo ago
Stale
AdoptionUnder 100 stars
75 ★ · Niche
DocsREADME + description
Well-documented

GitHub Signals

Stars75
Forks19
Issues1
Updated4mo ago
View on GitHub
MIT License

My Fox Den

Community Rating

Sign in to rate this booster

Works With

Claude Code