Stats
Actions
Tags
'%20stop-opacity%3D'0.16'%2F%3E%3Cstop%20offset%3D'1'%20stop-color%3D'rgb(200%2C90%2C60)'%20stop-opacity%3D'0.03'%2F%3E%3C%2FlinearGradient%3E%3C%2Fdefs%3E%3Crect%20width%3D'320'%20height%3D'200'%20fill%3D'url(%23g)'%2F%3E%3Ccircle%20cx%3D'250'%20cy%3D'56'%20r%3D'92'%20fill%3D'rgb(200%2C90%2C60)'%20fill-opacity%3D'0.06'%2F%3E%3Ccircle%20cx%3D'64'%20cy%3D'172'%20r%3D'58'%20fill%3D'rgb(200%2C90%2C60)'%20fill-opacity%3D'0.05'%2F%3E%3C%2Fsvg%3E)
From ado-aw
Downloads and analyzes a finished ado-aw pipeline build for security/behavior reports including firewall activity, MCP tool calls, detection findings, token usage, and policy signals.
How this skill is triggered — by the user, by Claude, or both
Slash command
/ado-aw:audit-buildThis skill is limited to the following tools:
The summary Claude sees in its skill listing — used to decide when to auto-load this skill
Analyze a **finished** ado-aw pipeline build and render its findings.
Analyze a finished ado-aw pipeline build and render its findings.
Confirm the ado-aw compiler is installed (ado-aw --version) and that ADO
read auth is available (gh/az or a PAT).
Run the audit. Accepts a bare build id or a full Azure DevOps build URL:
audit_build — same shape as ado-aw audit --json; returns the
structured AuditData report.ado-aw audit <build-id-or-url> (add --json for machine output).trace_failure — when the build failed, correlate the failed-job chain with
the local IR graph.The report's analyzers cover: detection-stage artifacts, AWF firewall/network logs, build timeline / job-level data, MCP tool calls, missing-tool / missing-data / noop safe outputs, OTel agent stats (token usage, duration, turns), policy findings (safe-output integrity, prompt-injection signals), and safe-output NDJSON.
Summarize findings by severity and call out anything in the firewall, policy,
or safe-output sections explicitly. The audit cache is keyed on build id;
pass --no-cache (CLI) / no_cache: true (MCP) to force a fresh download.
The user's request: $ARGUMENTS
npx claudepluginhub githubnext/ado-aw --plugin ado-awDiagnose failing ado-aw agentic Azure DevOps pipelines when agents fail to reach MCP/network hosts, safe outputs aren't applied, or builds behave unexpectedly.
Audits codebases for exploitable vulnerabilities using reconnaissance, adversarial review, and structured reporting. Activates on security audit, bug hunt, or pen-test requests.
Performs a formal security audit of a codebase, producing a prioritized report with remediation plan. Covers SAST, OWASP Top 10, SCA, and Zero Trust.