domains / families / security / audit-context-building

audit-context-building

combined

Enables ultra-granular, line-by-line code analysis to build deep architectural context before vulnerability or bug finding. Understand a codebase before looking for bugs in it - what each function assumes, what it guarantees, and what it depends on elsewhere. Use when starting an audit, threat model, or architecture review on unfamiliar code, and before any vulnerability-hunting pass.

When to use

• Deep comprehension is needed before bug or vulnerability discovery.
• You want bottom-up understanding instead of high-level guessing.
• Reducing hallucinations, contradictions, and context loss is critical.
• Preparing for security auditing, architecture review, or threat modeling.
• Vulnerability findings
• Fix recommendations
• Exploit reasoning
• Severity/impact rating

When not to use

• Use this skill only when the task clearly matches the scope described above.
• Do not treat the output as a substitute for environment-specific validation, testing, or expert review.
• Stop and ask for clarification if required inputs, permissions, safety boundaries, or success criteria are missing.
• Do not name vulnerabilities, suggest fixes, write proofs-of-concept, or rate severity. Those belong to the hunting phase, which runs next and with the whole picture in hand. When the code counts on something and nothing checks it, record t…

Skill page

Conflict

The two copies describe the same pre-audit phase but enforce it in incompatible ways. The trailofbits copy is a routing skill: it explicitly forbids doing the analysis in the current context and requires dispatching subagents to write files, returning only compact records. The sickn33 copy is a behavioral skill: it instructs the agent to perform ultra-granular, line-by-line analysis in the current context using specific heuristics (5 Whys, 5 Hows) and a detailed checklist. Because one copy mandates delegation to avoid context bloat while the other mandates direct, deep analysis, crowning one would hide a real alternative approach to the same task.