edwinhu/audit-verify
skills/bluebook-audit/skills/audit-verify/SKILL.md
Phase 5: Verify all corrections were applied correctly
$ install --global
skillsauthnpx skillsauth add edwinhu/workflows audit-verifyInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Jun 10, 2026, 3:24 AM21.0s1 file scanned
SKILL.md
- name:
- audit-verify
- description:
- Phase 5: Verify all corrections were applied correctly
- user-invocable:
- false
- disable-model-invocation:
- true
Phase 5: Verify
Re-scan the corrected DOCX to confirm all fixes were applied and no new issues were introduced.
What This Phase Does
- Re-extract all footnotes from the corrected DOCX
- Re-run mechanical checks (small caps scanner, signal checker, etc.)
- Compare findings against the original audit - all flagged issues should now be clean
- Report any remaining issues
Verification Checks
- Formatting scanner: Re-run
scan_formatting.py --docx corrected.docx- expect 0 findings (or only known false positives like "Institutional Investors" in titles) - Cross-reference check: All
[_]placeholders should be resolved - Signal formatting: All signals should be italic
- Terminal periods: All footnotes should end with periods
- Id. chains: All id. references should have single-source predecessors
- Gemini re-audit on fixed footnotes: Re-run
gemini_audit.py --subset [all previously flagged FNs]to catch issues introduced by fixes or missed in the initial pass
Re-Scan Catches Real Issues
In the "Other People's Votes" audit, the Gemini re-scan on fixed footnotes caught a Wells Fargo press release title (FN206) that wasn't in the original "judgment call" list — it was in the same footnote as other fixes but wasn't flagged initially. The verify phase is not ceremonial; it finds real issues.
<EXTREMELY-IMPORTANT> ## Iron Law: Re-Scan Is Not OptionalThe verify phase MUST re-run the scanner on the corrected DOCX. Skipping verification was the root cause of missing 41 small caps fixes in the original audit.
If the re-scan finds issues, go back to Correct phase. Do NOT proceed to Archive with unresolved issues. </EXTREMELY-IMPORTANT>
Red Flags
- Skipping the re-scan because "all fixes applied" → run the scanner; silent fix failures are common.
- Dismissing remaining findings as false positives → investigate each one; some "false positives" are real.
- Proceeding to Archive with >0 real issues → fix them first; uncorrected issues persist forever.
Gate: Exit Verify
Before proceeding to Archive phase:
- [ ] Re-scan completed on corrected DOCX
- [ ] Zero remaining issues (or all remaining are confirmed false positives)
- [ ] If issues found: returned to Correct phase and re-verified
Next Phase
Read ${CLAUDE_SKILL_DIR}/../../../../skills/bluebook-audit/skills/audit-archive/SKILL.md and follow its instructions.
Related Skills
edwinhu/npx-ownership-panel
development
VerifiedTrustedCommunity
Build the meeting-level proxy-voting × ownership panel on the WRDS SGE grid — ISS N-PX fund votes reduced to (item × block) direction cells, joined to institutional and mutual-fund ownership. Use when working with risk.voteanalysis_npx, N-PX fund-level votes, ISS→CRSP fund linking, index/passive/active voting blocks, or a proxy-voting panel that needs ownership attached.
17SKILL.mdUpdated Jul 28, 2026
edwinhu/crsp-v2
development
VerifiedTrustedCommunity
Use when "CRSP CIZ", "CRSP v2", "CRSP flat file format 2.0", "crsp.dsf_v2 / msf_v2", "StkDlySecurityData", "StkMthSecurityData", "StkSecurityInfoHist", "stocknames_v2", "DlyRet / MthRet / DlyPrc / MthPrc", "SHRCD or EXCHCD equivalent in new CRSP", "SIZ to CIZ migration", "CRSP data after 2024", "CRSP delisting returns", "CRSP cumulative adjustment factors", "CRSP index INDNO / INDFAM", or any CRSP stock/index query where the legacy SIZ column names no longer exist.
17SKILL.mdUpdated Jul 28, 2026
edwinhu/fuzzy-name-matching
development
VerifiedTrustedCommunity
Use when linking or deduping datasets by entity name rather than a shared key — 'fuzzy match', 'fuzzy name matching', 'entity resolution', 'record linkage', 'match company/person names', 'dedupe entity names', 'name-based join', 'bridge identifiers' (CIK ↔ permno ↔ gvkey ↔ wficn ↔ EIN ↔ personid), or any use of char n-gram TF-IDF, cosine similarity on names, `sparse_dot_topn`, or RapidFuzz at scale.
17SKILL.mdUpdated Jul 23, 2026
edwinhu/ds-tables
development
VerifiedTrustedCommunity
Use when building a publication-quality table in Python — 'regression table', 'results table', 'summary statistics table', 'etable', 'coefplot', 'great_tables', 'GT', 'gt table', 'format a table for the paper', 'export table to LaTeX/HTML', significance stars, spanners, or column formatting for a table headed into a paper, slide deck, or notebook.
17SKILL.mdUpdated Jul 23, 2026