Reaudit

/reaudit — Verify Security Fixes & State Tracking

Three modes of operation:

| Command | Action | Reads files? | |---------|--------|-------------| | /reaudit | Full incremental re-audit (Phase 4) | Only changed files | | /reaudit mark-fixed | Lightweight: mark finding as fixed | No | | /reaudit mark-deferred | Lightweight: mark as structurally deferred | No | | /reaudit status | Show fix progress summary | No (scans annotations) |

---

Mode 1: Full Re-Audit (/reaudit)

Load and follow code-security-audit Phase 4. Key steps:

1. Parse status annotations — scan docs/SECURITY_AUDIT.md for all ` lines. Extract FILE, LINES, STATUS` for each finding.

1. Diff-filter — run git diff --name-only ..HEAD. Only findings whose FILE appears in the diff need re-verification.

1. Re-verify changed-file findings — read the file at the flagged location, check fix status:

• STATUS=fixed COMMIT= if fix is in place
• STATUS=not-fixed if still vulnerable
• STATUS=partial if partially addressed

1. Skip unchanged-file findings — keep current STATUS, don't re-read.

1. Check for regressions — scan added lines in the diff for new vulnerability patterns.

1. Add Re-Audit section to the report (structure defined in code-security-audit Phase 4).

---

Mode 2: mark-fixed (/reaudit mark-fixed )

Lightweight state update. No file reads. Use after committing a fix.

1. Grep the report for `

## Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

- **Author:** [Azzygoatcoder](https://github.com/Azzygoatcoder)
- **Source:** [Azzygoatcoder/claude-useful-skills](https://github.com/Azzygoatcoder/claude-useful-skills)
- **License:** MIT

Install and usage instructions live in the source repository linked above.