shenxingy/audit
mcp-package/skills/audit/SKILL.md
Audit `corrections/rules.md` — finds learned rules that should be promoted to CLAUDE.md or into hooks, detects redundancy, and flags contradictions. Scope is the learning-system meta-file ONLY. NOT for domain audits — use /seo-audit for SEO, /blog-audit for blog content, /ads-audit for paid ads, /cso for security review.
$ install --global
skillsauthnpx skillsauth add shenxingy/claude-code-kit auditInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Jun 13, 2026, 5:14 AM14.4s2 files scanned
SKILL.md
- name:
- audit
- description:
- Audit `corrections/rules.md` — finds learned rules that should be promoted to CLAUDE.md or into hooks, detects redundancy, and flags contradictions. Scope is the learning-system meta-file ONLY. NOT for domain audits — use /seo-audit for SEO, /blog-audit for blog content, /ads-audit for paid ads, /cso for security review.
- when_to_use:
- audit corrections, audit rules.md, promote rules, review learned rules, correction rules meta-audit — NOT for SEO, blog/content, ads, or security audits (see description for the right skill)
- user_invocable:
- true
Related Skills
shenxingy/codex-orchestrate
development
VerifiedTrustedCommunity
Orchestrate a fleet of parallel `codex exec` workers with you (Claude Code) as the supervisor — spawn one per isolated git worktree, dispatch headless, verify each INDEPENDENTLY, PR/merge. The manual "codex-ultracode" pattern for fanning out real implementation, research, or review work onto Codex. Bakes in the hard gotchas (stdin blocking, background tracking, don't-trust-self-reports, writer isolation). Triggers on — orchestrate codex, codex workers, codex fleet, spawn codex, delegate to codex in parallel, manual ultracode, 开 codex 小弟, 派 codex worker — NOT for a single cross-vendor opinion (use the `second-opinion-codex` agent), NOT for web-UI worker decomposition (use `/orchestrate`).
8SKILL.mdUpdated Jul 16, 2026
shenxingy/worktree
development
VerifiedTrustedCommunity
Create and manage git worktrees for parallel Codex sessions
8SKILL.mdUpdated Jul 14, 2026
shenxingy/verify
development
VerifiedTrustedCommunity
Verify project behavior anchors — compilation, tests, and interaction checks after autonomous runs. NOT the Codex built-in /verify (which runs the app to observe a single change working) — this one walks the AGENTS.md "Features (Behavior Anchors)" list.
8SKILL.mdUpdated Jul 14, 2026
shenxingy/sync
documentation
VerifiedTrustedCommunity
End-of-session documentation sync — updates TODO.md and PROGRESS.md only (run /commit after to commit everything)
8SKILL.mdUpdated Jul 14, 2026