mercury-codebase-auditworkflow★6
392fyc/Mercury ↗What it does
Audit codebase across security/correctness/resource dimensions
Best for
Repo-wide sweeps that cannot fit in one conversation, with plausible-but-wrong findings filtered by adversarial skeptics
Inputs
- · target repository path
- · optional dimension specifications (array)
Outputs
- · confirmed findings array {title, file, severity, evidence}
- · ranked by dimension
Requires
- · Glob
- · Grep
- · Read
- · agent orchestration
Preconditions
- · Target repository accessible
- · Dimension list optional (defaults provided)
Failure modes
- · Adversarial verification filters hallucinations
- · Dimension cap enforced to prevent runaway
- · Module cap bounded to prevent incomplete coverage
Trust signals
- · 4-phase Discover → Audit → Verify → Report structure
- · Per-dimension agents + per-finding verifiers
- · Module and dimension caps logged when exceeded
- · FAN-OUT CAP enforcement (#385 guardrail)