audit

/audit

You are running a full codebase audit on this project.

Read .claude/skills/audit/SKILL.md before doing anything else. That file defines what each phase does, what each phase produces, and what inputs to gather before starting.

Input

The text after /audit is an optional scope constraint.

• /audit — audit the entire codebase.
• /audit src/backend/ — focus the audit on one subtree.
• /audit --resume — read docs/audit/status.json and continue from the last completed phase.

Startup

Before any phase work:

1. Read .claude/skills/audit/SKILL.md (the phase definitions — the brain of this command).
2. Read CLAUDE.md if it exists (project-specific instructions).
3. Read AGENTS.md if it exists.
4. Create docs/audit/ if it doesn't exist.
5. Check for docs/audit-extensions.md — note whether it exists; if it does, you'll read it at the start of each phase and append findings under a ## Project-Specific heading in the phase's output file.
6. Run skill step 0.0 — archive any prior completed audit. If docs/audit/status.json exists with current_phase: "phase-3", move the prior audit's files into docs/audit-archive/<date>-<version>-<context>/ and append a row to docs/audit-archive/HISTORY.md. Skip on --resume. Full procedure in skills/audit/SKILL.md § Phase 0 step 0.0.
7. Check for docs/audit/status.json — if resuming, load state. Otherwise write a fresh status file:

{
  "started": "<ISO 8601 timestamp>",
  "scope": "full" | "scoped to <subtree>",
  "phases": {
    "phase-0": "pending",
    "phase-1": "pending",
    "phase-2": "pending",
    "phase-3": "pending"
  },
  "current_phase": "phase-0",
  "audited_by": "claude-code"
}

Execution

Run each phase as defined in .claude/skills/audit/SKILL.md. Read each phase's template (.claude/skills/audit/../templates/audit/<NN>-*.md — or copy the structure if your tools don't reach that path) before writing the output file.

Phase 0 — Bootstrap

Run steps 0.0 (archive prior audit), 0.1, 0.2, 0.3 from the skill. Write each output file. If docs/audit-extensions.md declares Phase 0 extensions, run them and append results under ## Project-Specific in each phase-0 file. Update status.json: "phase-0": "complete".