repo-audit

Source-first security audit of a repository — recon, ledger-driven hunting, independent verification, and record-derived reporting. Use when the user asks to audit a codebase, review a repo/diff for vulnerabilities, or runs /xp audit. Live target interaction is disabled in this mode; use the web-pentest skill for authorized live assessments.