DotanVG/claude-audit
.claude/skills/claude-audit/SKILL.md
Audit this repo's Claude Code setup for drift across CLAUDE.md, settings, hooks, worktree files, and local skills.
$ install --global
skillsauthnpx skillsauth add DotanVG/Orbital-Breach claude-auditInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 17, 2026, 12:15 PM11.4s1 file scanned
SKILL.md
- name:
- claude-audit
- description:
- Audit this repo's Claude Code setup for drift across CLAUDE.md, settings, hooks, worktree files, and local skills.
- disable-model-invocation:
- true
- allowed-tools:
- Read Grep Glob LS Bash
Claude Audit
Use this skill when the user wants to verify that the repo-level Claude setup still matches the documented layout.
Audit checklist
Check these files and directories together:
CLAUDE.mdCLAUDE.local.mdexpectations only; do not require the file to exist.claude/settings.json.claude/settings.local.jsonexpectations only; it should stay local and gitignored.claude/hooks/.claude/skills/.worktreeinclude.gitignore
What to validate
- Shared config lives in tracked files and local-only config is ignored.
- Hook script paths match what
.claude/settings.jsonreferences. - Skills are in
.claude/skills/<name>/SKILL.mdwith usable frontmatter. - Worktree-local files that should follow Claude sessions are listed in
.worktreeinclude. CLAUDE.mdstill describes the Claude-specific workflow accurately.
Reporting
- List mismatches first.
- Then list any optional improvements.
- If everything is aligned, say so plainly.
Related Skills
DotanVG/web-game-foundations
development
VerifiedTrustedCommunity
Set browser-game architecture before implementation. Use when the user needs engine choice, simulation and render boundaries, input model, asset organization, or save/debug/performance strategy.
1SKILL.mdUpdated Apr 17, 2026
DotanVG/web-3d-asset-pipeline
development
VerifiedTrustedCommunity
Prepare and optimize browser-game 3D assets. Use when the user asks for GLB or glTF shipping work, including Blender cleanup and export, collision or LOD setup, compression, texture packaging, and runtime validation.
1SKILL.mdUpdated Apr 17, 2026
DotanVG/three-webgl-game
development
VerifiedTrustedCommunity
Implement browser-game runtimes with plain Three.js. Use when the user wants imperative scene control in TypeScript or Vite with GLB assets, loaders, physics, and low-level WebGL debugging.
1SKILL.mdUpdated Apr 17, 2026
DotanVG/ship-staging
tools
VerifiedTrustedCommunity
Prepare, commit, push, and summarize a staging-only change for Orbital Breach.
1SKILL.mdUpdated Apr 17, 2026