Трассировка системных потоков для аудита безопасности

★ 6.6 · security

audit-flow is a Claude Code skill that interactively traces system flows across CODE, API, AUTH, DATA, and NETWORK layers, persisting every tuple and edge to SQLite and exporting results as Mermaid diagrams, JSON, YAML, or Markdown. It enforces a strict DB-first discipline: SQLite is the sole source of truth, and the context window is never trusted for flow state — this prevents audit history loss during context compaction. A session can contain multiple named flows with branching and merging, traced at fine granularity (~50–200 tuples, suited for security audits and debugging) or coarse granularity (~10–30 tuples, suited for architecture reviews and compliance documentation). The skill fits security audits, incident post-mortems, architecture reviews, and compliance workflows. It requires Python 3.8+ with stdlib only; pyyaml is optional for YAML export.