hefestoai-auditor
AI-powered architectural guardian with Socratic Adaptive Constitution.
Setup & Installation
Install command
clawhub install artvepa80/hefestoai-auditorIf the CLI is not installed:
Install command
npx clawhub@latest install artvepa80/hefestoai-auditorOr install with OpenClaw CLI:
Install command
openclaw skills install artvepa80/hefestoai-auditoror paste the repo link into your assistant's chat
Install command
https://github.com/openclaw/skills/tree/main/skills/artvepa80/hefestoai-auditorWhat This Skill Does
Static code analysis tool that scans for security vulnerabilities, code smells, and complexity issues across 17 languages, including Python, TypeScript, Java, Go, and common DevOps formats like Dockerfile and Terraform. All analysis runs locally with no network calls, so source code never leaves the machine.
Because analysis is fully local, it works on proprietary or regulated codebases without sending source code to external services.
When to Use It
- Scanning a repo for hardcoded API keys before a production deploy
- Blocking git pushes automatically when SQL injection risks are detected
- Auditing AI-generated code for logic changes that preserve syntax but alter intent
- Generating an HTML security report for a client or compliance review
- Failing CI builds on any HIGH or CRITICAL severity finding
Example Workflow
Here's how your AI assistant might use this skill in practice.
User asks: Scanning a repo for hardcoded API keys before a production deploy
- 1Scanning a repo for hardcoded API keys before a production deploy
- 2Blocking git pushes automatically when SQL injection risks are detected
- 3Auditing AI-generated code for logic changes that preserve syntax but alter intent
- 4Generating an HTML security report for a client or compliance review
- 5Failing CI builds on any HIGH or CRITICAL severity finding
AI-powered architectural guardian with Socratic Adaptive Constitution.
Security Audits
These signals reflect official OpenClaw status values. A Suspicious status means the skill should be used with extra caution.