audit

Run a comprehensive audit. This is the gate before any push or PR.

1. Sanitization

Run /sanitize first. If it fails, stop and report the failures - do not continue with later checks until sanitization is clean.

2. Frontmatter validation

Walk every agent / skill / command file and validate frontmatter:

Contracts are vendor-scoped since the mid-2026 convergence - see wiki/Frontmatter-Contracts.md and the frontmatter-lint skill. Do not hold non-Claude vendors to Claude's contract.

echo "── frontmatter check (agents: Claude contract) ──"
# Claude requires name + description; model and color are optional.
for f in .claude/agents/*.md agents/agent-template.md agents/examples/*.md runtimes/.claude/agents/*.md; do
  [ -f "$f" ] || continue
  case "$f" in *README.md) continue ;; esac
  for k in name description; do
    grep -q "^$k:" "$f" || echo "  ERROR $f: missing $k"
  done
done

echo
echo "── frontmatter check (agents: Codex contract) ──"
# Codex agents are TOML, not Markdown - keys are `name = "..."`, not `name:`.
for f in runtimes/.codex/agents/*.toml; do
  [ -f "$f" ] || continue
  for k in name description developer_instructions; do
    grep -qE "^$k *=" "$f" || echo "  ERROR $f: missing $k"
  done
done

echo
echo "── frontmatter check (agents: other vendors) ──"
# SpecRoute's portable publication baseline is name + description. Some vendor
# parsers accept less; the audit intentionally holds shipped templates to the
# stronger portable baseline. model/color remain Claude-specific.
# Devin Local subagent profiles use per-profile `AGENT.md` directories under
# `runtimes/.devin/agents/`. Cascade compatibility paths are not a second runtime.
for f in runtimes/.gemini/agents/*.md runtimes/.kiro/agents/*.md runtimes/.cursor/agents/*.md runtimes/.devin/agents/*/AGENT.md; do
  [ -f "$f" ] || continue
  case "$f" in *README.md) continue ;; esac
  for k in name description; do
    grep -q "^$k:" "$f" || echo "  ERROR $f: missing $k"
  done
done

echo
echo "── frontmatter check (skills) ──"
# Contract lives in wiki/Frontmatter-Contracts.md. The Agent Skills open standard
# uses name + description as the portable baseline. argument-hint /
# user-invocable / allowed-tools are optional Claude Code extensions, so they
# are warnings only in Claude-shaped templates.
for f in .claude/skills/*/SKILL.md .agents/skills/*/SKILL.md \
         skills/skill-template/SKILL.md skills/examples/*/SKILL.md \
         runtimes/.claude/skills/*/SKILL.md runtimes/.codex/skills/*/SKILL.md \
         runtimes/.gemini/skills/*/SKILL.md runtimes/.kiro/skills/*/SKILL.md \
         runtimes/.cursor/skills/*/SKILL.md runtimes/.devin/skills/*/SKILL.md; do
  [ -f "$f" ] || continue
  for k in name description; do
    grep -q "^$k:" "$f" || echo "  ERROR $f: missing $k"
  done
  case "$f" in
    .claude/*|skills/*|runtimes/.claude/*)
      for k in argument-hint user-invocable allowed-tools; do
        grep -q "^$k:" "$f" || echo "  WARN  $f: missing $k (optional Claude extension)"
      done ;;
  esac
done

echo
echo "── frontmatter check (Claude commands) ──"
for f in commands/command-template.claude.md commands/examples/*.claude.md runtimes/.claude/commands/*.md .claude/commands/*.md; do
  [ -f "$f" ] || continue
  case "$f" in *README.md) continue ;; esac
  grep -q "^description:" "$f" || echo "  ERROR $f: missing description"
done