audit-loop_skill

Overview

This skill runs an automated, iterative audit-and-fix loop focused on the files you recently edited. It spawns three parallel audits—performance, security, and code quality—fixes any Critical or High findings, and repeats until the changed files are clean or a max iteration limit is reached. Invoke with /audit-loop to run the process on staged and unstaged changes.

How this skill works

The skill detects changed files via git diff (HEAD and cached) and filters to auditable extensions (.php, .phtml, .xml). It starts a Ralph Wiggum loop that runs three parallel subagents for performance, security, and code quality audits, collects severity-labeled findings, and automatically applies fixes for Critical and High issues. After fixes it compiles PHP changes and flushes caches, then re-runs audits up to five iterations or until no Critical/High findings remain.

When to use it

• Before committing a feature or refactor to catch regressions early
• When you want a hands-off audit-and-fix cycle for recently edited files
• To verify performance, security, and quality concerns focused only on changed code
• When you need automated re-auditing until Critical/High issues are resolved

Best practices

• Run on the branch containing your work before pushing to remote
• Stage any files you want audited so both staged and unstaged changes are detected
• Review automated fixes before committing, especially for behavioral changes
• Ensure your development environment can run bin/magento commands used for compile and cache flush
• Limit edits to relevant files per audit (.php, .phtml, .xml) to keep audits focused

Example use cases

• After refactoring a checkout flow, run /audit-loop to catch N+1, escaping, or PSR violations in changed files
• When adding a new controller or model, ensure security and code quality fixes are applied automatically
• Before opening a pull request, run the loop to ensure no Critical/High findings remain in modified files
• Use during a rapid iteration cycle to automatically apply urgent fixes and re-audit until clean