skill-audit
π―Skillfrom philoserf/claude-code-setup
Audits code repositories for compliance with predefined coding standards, best practices, and potential security vulnerabilities.
Installation
npx skills add https://github.com/philoserf/claude-code-setup --skill skill-auditSkill Details
Overview
# Claude Code Setup
A comprehensive, production-ready configuration for [Claude Code](https://claude.com/claude-code) demonstrating best practices for customization and automation. This is a reference implementationβfork it, steal what you like, adapt it to your workflow.
What's Here
- 2 Agents: Specialized assistants for specific tasks (evaluator, test runner)
- 17 Skills: Reusable capabilities for auditing, authoring, workflows, and more
- 7 Hooks: Automation for validation, formatting, logging, and notifications
- Decision guides and references: Help choosing the right component type and naming things consistently
This directory (~/.claude) is the global configuration directory for Claude Code. All customizations here apply across projects unless overridden locally.
Installation
Don't install this. Just steal what you like.
Quick Start
- Customize your settings
- Edit settings.json to adjust tool permissions and MCP servers
- Edit CLAUDE.md to document your coding principles and preferences
- Create customizations
- Use /create-agent [name] to build specialized agents
- Use /create-skill [name] to create reusable capabilities
- Use /create-command [name] to build quick shortcuts
- Use /create-output-style [name] to define behavior modes
- Review the decision guides
- references/decision-matrix.md - Quick component selection
- references/when-to-use-what.md - Detailed scenarios and examples
Directory Structure
Configuration Files
| File | Purpose |
| --------------- | --------------------------------------------------------------------- |
| settings.json | Global permissions, MCP servers, cleanup policies, and tool approvals |
| CLAUDE.md | Instructions for Claude when working in this repository |
| .gitignore | Git ignore rules for this configuration directory |
Extension Directories (tracked in git)
| Directory | Purpose |
| ------------- | --------------------------------------------- |
| agents/ | Specialized AI agents for specific workflows |
| skills/ | Reusable capabilities and knowledge domains |
| hooks/ | Event-driven automation and validation |
| references/ | Shared decision guides and naming conventions |
Session Data (not tracked in git)
| Directory | Purpose |
| ------------------ | --------------------------------------- |
| projects/ | Per-project metadata and usage tracking |
| todos/ | Session-scoped todo lists |
| plans/ | Implementation plans from plan mode |
| file-history/ | Change tracking for edited files |
| session-env/ | Environment snapshots per session |
| logs/ | Session and commit history logs |
| debug/ | Session debug output |
| shell-snapshots/ | Shell environment captures |
| statsig/ | Feature flag evaluation cache |
| history.jsonl | Conversation history across sessions |
Customizing Your Setup
Creating Agents
When to use: Build specialized assistants for complex tasks requiring specific tools, models, or focused behavior.
```bash
/create-agent my-agent
```
The agent-authoring skill guides you through:
- Defining purpose and scope
- Selecting model (Sonnet/Haiku/Opus)
- Configuring tool restrictions
- Writing focus areas and approach
Examples: Read-only analyzers, code generators, domain-specific experts
Creating Skills
When to use: Encapsulate domain knowledge, best practices, or complex workflows that multiple agents/commands might use.
```bash
/create-skill my-skill
```
The skill-authoring skill guides you through:
- Defining capabili
More from this repository10
Scans and analyzes shell command histories to identify potential security risks, inefficiencies, and compliance issues across systems
Organizes and restructures project folders by automatically categorizing files, removing duplicates, and creating a logical directory hierarchy.
Maps and generates a comprehensive structural overview of a software project's codebase, identifying key components, dependencies, and architectural relationships.
Helps refine and improve text documents by providing intelligent editing suggestions, grammar corrections, and stylistic enhancements.
Evaluates code quality, complexity, and potential issues by performing comprehensive static analysis and generating detailed assessment reports.
Analyzes AI agent configurations, identifies potential security risks, and provides recommendations for improving agent safety and performance.
Runs automated tests across a project, executing test suites and reporting results for different programming languages and frameworks.
Analyzes code deeply, providing comprehensive introspection and detailed insights about code structure, dependencies, and potential improvements.
Helps developers systematically create, structure, and configure specialized AI agents with predefined templates and best practices for Claude Code workflows.
Coordinates comprehensive code audits by systematically reviewing project files, identifying potential issues, and generating detailed assessment reports across multiple dimensions.