diff --git a/.claude/skills/rmm-audit/SKILL.md b/.claude/skills/rmm-audit/SKILL.md
index e66d2b2..99c04a0 100644
--- a/.claude/skills/rmm-audit/SKILL.md
+++ b/.claude/skills/rmm-audit/SKILL.md
@@ -36,6 +36,14 @@ parallel subagents. The build pipeline pass runs sequentially after (it touches
 live server state via SSH). Each agent returns structured findings; the coordinator
 aggregates and writes the final report.
 
+### Model (MANDATORY)
+
+**Always run every audit pass on Opus 4.7.** Spawn each agent with `model: "opus"`
+(the `opus` alias resolves to the latest Opus, currently `claude-opus-4-7`). This
+overrides the default complexity-based model routing — do NOT downgrade any pass to
+Sonnet or Haiku, even the lower-stakes ones (API coverage, TypeScript). The
+coordinator orchestration also runs on 4.7.
+
 ---
 
 ## Phase 0: Context Load (Coordinator Reads These)
@@ -366,7 +374,7 @@ Write to: `projects/msp-tools/guru-rmm/reports/YYYY-MM-DD-rmm-audit.md`
 ```markdown
 # GuruRMM Audit Report — YYYY-MM-DD
 
-**Auditor:** Claude (claude-sonnet-4-6)
+**Auditor:** Claude (claude-opus-4-7)
 **Passes:** API Coverage, UI Gaps, Rust Quality, TypeScript Quality, Data Integrity, Build Pipeline
 **Previous audit:** [link to prior report if one exists, else "First audit"]