audit/SKILL.md
Audit project against golden principles, produce scorecard. Use for /audit, "check project quality". NOT for system setup health (/harness-audit) or eval scoring (/eval-score).
npx skillsauth add ingpoc/skills auditInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
EXECUTE this skill now. Follow the workflow steps below using the provided $ARGUMENTS. Do NOT describe, summarize, or explain this skill — run it.
PRINCIPLES_DIR: C:/Users/gurusharan.gupta/Agents/Claude Code/principlesPRINCIPLES_INDEX: C:/Users/gurusharan.gupta/Agents/Claude Code/principles/_index.jsonMANIFEST_PATH: C:/Users/gurusharan.gupta/Agents/Claude Code/manifest.jsonParse $ARGUMENTS to determine action:
/audit — Audit the current project/audit <project-id> — Audit a specific registered project by ID/audit all — Audit all active projects in the manifest/audit principles — List all golden principles with descriptionsIf no argument, use the current working directory.
If a project-id is given, look it up in the manifest to get the path.
If all, iterate over all active projects.
Read PRINCIPLES_INDEX to get the list of all principles with severity and enforcement method.
For each principle, run the appropriate check against the project directory:
claude-md-required (critical):
CLAUDE.md or .claude/CLAUDE.md existsformatting-configured (critical):
.prettierrc, .prettierrc.json, prettier in package.json, .eslintrc*, eslint.config.*pyproject.toml with [tool.black] or [tool.ruff], .flake8, setup.cfg with flake8rustfmt.toml or .rustfmt.tomltests-required (critical):
jest.config.*, vitest.config.*, *.test.* or *.spec.* files exist, "test" script in package.jsonpytest.ini, pyproject.toml with [tool.pytest], tests/ directory, test_*.py files#[test] in source files or tests/ directorytest directoryparse-at-boundaries (critical):
semantic-file-naming (recommended):
helpers.*, utils.*, common.*, misc.*, shared.* at any levelno-utils-helpers-dirs (recommended):
find $PROJECT -type d -name "utils" -o -name "helpers" -o -name "misc" -o -name "common" -o -name "shared"node_modules/, venv/, .git/structured-logging (recommended):
Beyond principles, check:
docs/ directory exists with exec-plans/, design-docs/ subdirectories.claude/ directory exists.git/ initializedScoring:
Grade:
╔══════════════════════════════════════════════════╗
║ Audit: {project_name} ║
║ Path: {project_path} ║
╠══════════════════════════════════════════════════╣
║ ║
║ Golden Principles: ║
║ ✓ parse-at-boundaries PASS ║
║ ✗ claude-md-required FAIL (missing) ║
║ ✗ tests-required FAIL (no config)║
║ ✗ formatting-configured FAIL ║
║ ✓ semantic-file-naming PASS ║
║ ✓ no-utils-helpers-dirs PASS ║
║ ~ structured-logging MANUAL ║
║ ║
║ Infrastructure: ║
║ docs/ structure MISSING ║
║ .claude/ config PRESENT ║
║ .git/ initialized MISSING ║
║ Active exec-plans NONE ║
║ ║
║ Score: 40/100 ║
║ Grade: D ║
║ ║
║ Critical issues (fix first): ║
║ 1. Run /init-project to create CLAUDE.md ║
║ 2. Add test framework for Python ║
║ 3. Add formatter (black/ruff) config ║
║ ║
╚══════════════════════════════════════════════════╝
If the user wants to persist the score, update the project's entry in manifest.json with:
"quality_score": {
"grade": "D",
"score": 40,
"last_audit": "2026-03-26",
"critical_failures": 3,
"recommended_failures": 0
}
When the user runs /audit principles:
Read all principle files and display:
Golden Principles (7):
CRITICAL:
parse-at-boundaries All external data parsed at boundary into typed representations
tests-required All new code must have tests, target 100% coverage
formatting-configured Automated formatting/linting configured before agent work
claude-md-required CLAUDE.md must exist following table-of-contents pattern
RECOMMENDED:
semantic-file-naming Files/dirs use domain-specific names, not generic labels
no-utils-helpers-dirs No utils/, helpers/, misc/ directories
structured-logging Structured logging (JSON/key-value) in production code
devops
Deploy applications and infrastructure to Cloudflare using Workers, Pages, and related platform services. Use when the user asks to deploy, host, publish, or set up a project on Cloudflare.
tools
Design or review CLIs so both coding agents and humans can use them reliably: dual-audience output, non-interactive paths, layered help, machine-readable data, predictable flags, safe mutations, and actionable errors. Use when building a CLI, adding commands, writing --help, or when the user mentions agents, terminals, automation-friendly CLIs, JSON output, or headless usage.
tools
Build a composable CLI for Codex from API docs, an OpenAPI spec, existing curl examples, an SDK, a web app, an admin tool, or a local script. Use when the user wants Codex to create a command-line tool that can run from any repo, expose composable read/write commands, return stable JSON, manage auth, and pair with a companion skill.
development
Use when configuring apps to use z.ai GLM 4.7 proxy instead of standard Anthropic API. Works with any frontend (Next.js, Vite) or backend (Python, Node.js) framework.