edwinhu/audit-report
skills/bluebook-audit/skills/audit-report/SKILL.md
Phase 3: Generate and present audit report for user review
$ install --global
skillsauthnpx skillsauth add edwinhu/workflows audit-reportInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: May 29, 2026, 3:06 AM13.5s1 file scanned
SKILL.md
- name:
- audit-report
- description:
- Phase 3: Generate and present audit report for user review
- user-invocable:
- false
- disable-model-invocation:
- true
Phase 3: Report
Generate a human-readable audit report and present to the user for review before applying corrections.
What This Phase Does
- Merge three-layer findings: mechanical + Gemini per-footnote + Claude cross-footnote review (mechanical > Claude > Gemini priority — see audit-check merge rules)
- Categorize by issue type and severity
- Flag items needing manual review (low-confidence cross-refs, ambiguous citations)
- Generate
scratch/AUDIT_REPORT.md - Present summary to user
Three-Layer Merge Priority
Mechanical > Claude cross-review > Gemini per-footnote
- Mechanical findings (signal italic, terminal periods, Id. chains, small caps patterns) are deterministic and must never be dropped
- Claude cross-review adds cross-footnote patterns (supra chains, hereinafter consistency) and filters Gemini false positives
- Gemini per-footnote adds individual source type classification and abbreviation checks
Report Structure
# Bluebook Audit Report
## Summary
- Total footnotes: N
- Clean: N (XX%)
- Issues found: N across M footnotes
## Fix Counts by Category
| Category | Count | Auto-fixable |
|----------|-------|-------------|
| Journal name small caps | N | Yes |
| Book title small caps | N | Yes |
| Cross-reference resolution | N | Yes (high confidence) |
| Id. chain errors | N | Partial |
| Signal formatting | N | Yes |
| Terminal periods | N | Yes |
| Typeface errors (other) | N | Manual |
## Issues by Footnote
[sorted by footnote number]
## Items Needing Manual Review
[low-confidence cross-refs, ambiguous citations, judgment calls]
## Correct As-Is (Gemini False Positives)
[Items Gemini flagged but are actually correct, with reasoning]
[Group by source type: SEC releases (roman), exec orders (roman), etc.]
[Reference: audit-patterns.md Source Type Typeface Reference table]
Why "Correct As-Is" Matters
Many Gemini suggestions are wrong — especially for non-standard source types (SEC releases, exec orders, working paper designations). Documenting WHY these are correct:
- Prevents re-flagging if someone re-runs the audit
- Forces the reviewer to consciously evaluate each judgment call
- Creates a record of the source type classification decisions
Gate: Exit Report
This is a user gate. The workflow pauses here.
- [ ]
scratch/AUDIT_REPORT.mdexists - [ ] User has reviewed the report
- [ ] User approves proceeding to corrections
Do NOT proceed to corrections without user acknowledgment.
Next Phase
After user approval:
Read ${CLAUDE_SKILL_DIR}/../../../../skills/bluebook-audit/skills/audit-correct/SKILL.md and follow its instructions.
Related Skills
edwinhu/npx-ownership-panel
development
VerifiedTrustedCommunity
Build the meeting-level proxy-voting × ownership panel on the WRDS SGE grid — ISS N-PX fund votes reduced to (item × block) direction cells, joined to institutional and mutual-fund ownership. Use when working with risk.voteanalysis_npx, N-PX fund-level votes, ISS→CRSP fund linking, index/passive/active voting blocks, or a proxy-voting panel that needs ownership attached.
17SKILL.mdUpdated Jul 28, 2026
edwinhu/crsp-v2
development
VerifiedTrustedCommunity
Use when "CRSP CIZ", "CRSP v2", "CRSP flat file format 2.0", "crsp.dsf_v2 / msf_v2", "StkDlySecurityData", "StkMthSecurityData", "StkSecurityInfoHist", "stocknames_v2", "DlyRet / MthRet / DlyPrc / MthPrc", "SHRCD or EXCHCD equivalent in new CRSP", "SIZ to CIZ migration", "CRSP data after 2024", "CRSP delisting returns", "CRSP cumulative adjustment factors", "CRSP index INDNO / INDFAM", or any CRSP stock/index query where the legacy SIZ column names no longer exist.
17SKILL.mdUpdated Jul 28, 2026
edwinhu/fuzzy-name-matching
development
VerifiedTrustedCommunity
Use when linking or deduping datasets by entity name rather than a shared key — 'fuzzy match', 'fuzzy name matching', 'entity resolution', 'record linkage', 'match company/person names', 'dedupe entity names', 'name-based join', 'bridge identifiers' (CIK ↔ permno ↔ gvkey ↔ wficn ↔ EIN ↔ personid), or any use of char n-gram TF-IDF, cosine similarity on names, `sparse_dot_topn`, or RapidFuzz at scale.
17SKILL.mdUpdated Jul 23, 2026
edwinhu/ds-tables
development
VerifiedTrustedCommunity
Use when building a publication-quality table in Python — 'regression table', 'results table', 'summary statistics table', 'etable', 'coefplot', 'great_tables', 'GT', 'gt table', 'format a table for the paper', 'export table to LaTeX/HTML', significance stars, spanners, or column formatting for a table headed into a paper, slide deck, or notebook.
17SKILL.mdUpdated Jul 23, 2026