CommunityWriting & Editinggithub.com

Aegis Security Audit Skill Collection

Aegis: local offline security audit skill collection for AI coding agents — dev baseline / OSS release / app store / AI copyright.

What is Aegis Security Audit Skill Collection?

Aegis is a local, offline security audit skill collection designed specifically for AI coding agents. It covers key areas such as development baselines, open-source compliance, app store reviews, and AI copyright. The skill operates through an orchestrator script that checks platform-specific terms of service for commercial use and download rights, enforcing a hard veto if any platform prohibits either. For unlisted platforms, it triggers a manual review, ensuring thorough compliance checking without relying on external services. Supported platforms include OpenAI, Udio, Midjourney, and Suno, with others pending verification or requiring human intervention.

Works with~Claude Code✓Codex CLI~Cursor
npx skills add Bin-H-17/aegis-security-skill

Installed? Explore more Writing & Editing skills: steipete/notion, langchain-ai/langchain, bytedance/podcast-generation · View all 6 →

Ask in your favorite AI

Open a new chat with this agent skill pre-loaded.

Documentation

AI Content Copyright (Full Version F10, X1–X3 Veto Power)

Execution Steps

  1. Obtain the list of platforms (comma-separated, e.g., OpenAI,Udio) and intent (default commercial; optional download / both).
  2. Call the L2 orchestrator:
python "<SECURITY_AUDIT_HOME>/scripts/audit_orchestrator.py" --scenario ai --platforms "OpenAI,Udio" --intent commercial
  1. Read the verdict (stdout + optional retention in reports/).
  2. Report to user: per-platform verdict (PASS / VETO / MANUAL), overall Gate (block / pass).

Verdict Logic (X1–X3)

  • Check commercial_use and download_right per platform; do not assume compliance by default.
  • If any platform prohibits commercial use or download → overall VETO block.
  • If not in terms library (e.g., X7 Tongyi / Hunyuan) → MANUAL triggers human review, also blocks until manual confirmation.

Scope

  • Confirmed: OpenAI / Udio / Midjourney / Suno
  • Pending verification: Kling / Jimeng / Flux-dev (X5 non-commercial license)
  • Missing (manual required): Tongyi / Hunyuan (X7)
  • Terms library re-fetched and updated quarterly (U-05 / U-06).

Related Skills