ariffazil/FORGE-symlink-audit
skills/FORGE-symlink-audit/SKILL.md
Federation-wide broken symlink scanner. Scans /root for broken symlinks, categorizes by location, and reports with safe-delete recommendations. USE WHEN: "check symlinks", "broken links", "symlink debt", "find broken symlinks", or during entropy sweeps.
$ install --global
skillsauthnpx skillsauth add ariffazil/openclaw-workspace FORGE-symlink-auditInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Jul 20, 2026, 3:09 AM97.8s1 file scanned
SKILL.md
- name:
- FORGE-symlink-audit
- description:
- >
- USE WHEN:
- check symlinks", "broken links", "symlink debt", "find broken symlinks",
- version:
- 2026.07.19
- floors:
- [F1, F4]
- risk_tier:
- low
- autonomy_tier:
- T1
🔗 FORGE — Symlink Audit
DITEMPA BUKAN DIBERI — Forged, Not Given.
Purpose
Scan the federation for broken symbolic links, categorize by location, and report with safe-delete recommendations. Born from the 2026-07-19 session where 109 broken symlinks were found (97 archived Codex skills, 7 Playwright cache, 3 openclaw, 2 backups).
When to Use
- Morning entropy sweep
- After skill archive/migration operations
- When
find /root -maxdepth 5 -xtype lreturns >0 - As part of
make proveormake sot-check
Command
find /root -maxdepth 5 -xtype l 2>/dev/null | wc -l
Safe Cleanup
# Categorize first:
find /root -maxdepth 5 -xtype l 2>/dev/null | awk -F'/' '{print "/"$2"/"$3}' | sort | uniq -c | sort -rn
# Then delete (safe — all in cache/archive paths):
find /root -maxdepth 5 -xtype l -delete
Known Patterns
| Location | Typical Cause | Safe to Delete |
|----------|---------------|----------------|
| /root/.codex/skills.zen-archived-*/ | Archived Codex skill symlinks | ✅ |
| /root/.cache/ms-playwright*/ | Playwright browser session files | ✅ |
| /root/.cache/ms-playwright-mcp/ | Playwright MCP session files | ✅ |
| /root/.openclaw/ | OpenClaw session artifacts | ✅ |
| /root/.backups/ | Old backup symlinks | ✅ |
| /root/*/ (organ dirs) | Git/config symlinks | ⚠️ Verify before delete |
Constitutional Notes
- F1 AMANAH: Symlinks in
.cache/and archived dirs are safe to delete - F4 CLARITY: Broken symlinks = entropy. Clean them up.
- If symlink is in an organ directory, check if it's a
.gitsymlink before deleting
SOT: 2026-07-19 · seal_seq: 4
Related Skills
ariffazil/XAUUSD-trading-stack
development
VerifiedTrustedCommunity
Federation-wide gold (XAUUSD) trading capability. Python stack, OANDA broker, backtesting, macro signals, RSI strategy. Every organ has a role.
2SKILL.mdUpdated Jul 24, 2026
ariffazil/wealth-claim-state
development
VerifiedTrustedCommunity
Capital claim state management — tracks claim lifecycle across WEALTH organ.
2SKILL.mdUpdated Jul 24, 2026
ariffazil/warga-constitutional
development
VerifiedTrustedCommunity
Archived constitutional warga placeholder retained only for audit provenance. Do not use for active work; use the live arifOS governance and constitutional skills instead.
2SKILL.mdUpdated Jul 24, 2026
ariffazil/warga
testing
VerifiedTrustedCommunity
Warga (citizen) agent skills for AAA federation members. See subdirectories for specialized warga skills.
2SKILL.mdUpdated Jul 24, 2026