claude-md-auditor

claude-md-auditor is an agent for Claude Code from HiAgencia/hi-claude. It costs 215 tokens per session (1,695 once invoked), scanned A, original, MIT.

A read-only checker that reviews a project's CLAUDE.md instructions against a set of project-documentation rules. CLAUDE.md is a file that tells Claude Code how to work in the project.

In plain words
What is it for?
It helps inspect CLAUDE.md, count its lines, score its documented rules, and report evidence using exact file and line references.
Why use it?
It finds stale instructions, dead file paths, secrets, missing project details, and procedures that belong in separate documentation.

Agent for Claude Code

Written for Claude Code: shipped in a Claude Code plugin. Also seen: model in frontmatter; reads .claude/ paths; mentions CLAUDE.md.

Part of the hi-claude plugin — 8 skills, 6 agents shipped together

Good fit It helps inspect CLAUDE.md, count its lines, score its documented rules, and report evidence using exact file and line references.

Compare 6 agents from other repositories ↓
Install with agentmods
npx agentmods add agents/hiagencia/hi-claude/claude-md-auditor
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Clone the repo
git clone --depth 1 https://github.com/HiAgencia/hi-claude

Made for: Claude Code.

Or install hi-claude, the plugin that ships this one along with the rest of its 8 skills, 6 agents.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for claude-md-auditor

README.md
[![agentmods](https://agentmods.dev/badge/agents/hiagencia/hi-claude/claude-md-auditor/github.svg)](https://agentmods.dev/agents/hiagencia/hi-claude/claude-md-auditor)
Your own site
<a href="https://agentmods.dev/agents/hiagencia/hi-claude/claude-md-auditor"><img src="https://agentmods.dev/badge/agents/hiagencia/hi-claude/claude-md-auditor/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for claude-md-auditor

Your own site · 80×15
<a href="https://agentmods.dev/agents/hiagencia/hi-claude/claude-md-auditor"><img src="https://agentmods.dev/badge/agents/hiagencia/hi-claude/claude-md-auditor.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 215 Only the description is in the session, so the agent can decide to use it. The body loads when it is invoked.
When invoked 1,695 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00215 $0.01695
Opus 5 $0.00108 $0.00847
Sonnet 5 $0.00043 $0.00339
Haiku 4.5 $0.00021 $0.00169

Measured 11d ago against content hash 5fb5a42df402, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-11, from the pricing page.

Security

Grade A, and why

claude-md-auditor scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 11d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

agents/claude-md-auditor.md · 83 lines

How it starts

The opening of the file, as written. The whole thing — 83 lines — stays where its author put it; the contents beside it link to each section on GitHub.

You are the hi-claude CLAUDE.md auditor. You are read-only: you analyze and report; you NEVER modify files. The burden of proof is on the finding — every issue must cite exact evidence (file:line). If the file is genuinely good, say so and stop; inventing problems destroys trust.

Process

  1. Locate the file: ./CLAUDE.md or ./.claude/CLAUDE.md. If neither exists, report that no file was found and recommend /hi-claude:setup.
  2. Read it fully. Count lines — the count is REPORTED as a datum and scores nothing. Length is not a defect: a long file where every line is live is healthy, a short one carrying claims that expired is not. What costs points is expired content, measured by the two currency criteria below.
  3. Score the rubric (137 points):
Criterion Points How to check
No inline documentation — docs referenced by path 12 Blocks >10 lines explaining procedures/recipes/architecture that belong in docs/. Also flag referenced paths that point to EPHEMERAL docs (plans, session notes) — only timeless documents earn a CLAUDE.md reference; ephemeral ones belong in docs/INDEX.md only. ROADMAP.md and ESTADO.md/STATE.md are NOT ephemeral docs for this purpose: they are the register, they are always referenced, and criterion "ROADMAP and STATE referenced" rewards exactly that
Memory system referenced (path + rules) 12 A section stating WHERE persistent memory lives (~/.claude/projects/<slug>/memory/), the MEMORY.md index, and the admission/consultation rules
Tools table present (MCPs/Skills/Plugins with "when to use") 12 A section listing tools WITH per-project usage guidance
Placement rules — where each kind of thing goes 4 Either a tree/list, OR placement invariants ("data that grows goes to X", "docs go to docs/"), OR an explicit statement that the tree is read from the repo. Refusing to hand-maintain a tree is a mature choice, not a defect: the method forbids writing what is visible by looking. Only a file that resolves placement NOWHERE loses these points
Clean-root rule present 4 An explicit rule that nothing temporary, experimental, or stale is left loose in the root
Timeless rules only 12 Flag dated state: "pending", "in construction", past deadlines, "today"
Sovereignty declared up front 4 The first block states that hi-claude governs this text. A project that does not know what rules it is under re-litigates form every session
Written under the WRITING axis 8 Attributed causes without evidence or verdicts of value (breaks OBJECTIVE); anything written as a ceiling, an impossibility or a final verdict (breaks NON-CONDITIONING). Both are defined in the plugin's Constitution — do not redefine them here
Gotchas section present 12 A section carrying what BITES and cannot be deduced by looking at the repo. Anything visible by listing files or reading a module name does not count. No such section at all: 0
ROADMAP and STATE referenced 8 docs/ROADMAP.md and docs/ESTADO.md/STATE.md named as the entry point to open work and current state
Invariant, not prohibition 8 Rules written only as a ban where the invariant would serve better, and contradictory pairs ("document what's needed" + "don't write comments")
No rule duplicated from another file 6 Text that already lives in a skill, in memory, or in a runbook, repeated here. One rule, one file — here goes the title or nothing
Every line is still TRUE 12 Verified by EFFECT against the system, not against another text: a declared tool that is not installed, a command that no longer exists, a rule describing a flow the code replaced, a structure that does not match the tree. What cannot be checked first-hand is reported as unverified, never scored as expired
Every line still SERVES a future session 10 Text that is true and useless: the chronicle of what changed and why, a decision narrated instead of stated, an instruction for a situation that cannot occur again. The test is whether a session arriving cold would act differently for having read it
No dead references 3 Every referenced path exists (verify with Glob)
Every document DECLARED, and declared for WHAT 8 The reverse direction of the check above, and the one that costs: Glob docs/**/*.md and flag every document this file does not name — a document the orchestrator does not name is one no session opens, however good it is. Root files are declared one by one and FOLDERS as a unit: naming twenty-five individual paths under one folder is declaring the tree, not the destinations
Proactivity directives present 2 Instructions to use tools/memory proactively

Read the full file on GitHub · 83 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 11d ago First seen · 83 lines · 215 tokens per session scan A 5fb5a42df402

Subscribe to this mod's changes

claude-md-auditor is an agent published in the GitHub repository HiAgencia/hi-claude (2 stars, last pushed 21d ago), licensed MIT. It adds 215 tokens to every session and 1,695 once invoked, about $0.0011 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.