agentmods.dev

audit

audit is a plugin for Claude Code from AleksandarBisevac/claude-plugins. Its manifest loads nothing; the 2 skills, 20 commands, 4 agents, 6 hooks it bundles cost 1,785 tokens per session together, scanned A, original, MIT.

A command-based audit and repair system that uses a manifest, a planned sequence of work, tests, and review steps to manage code changes. It also includes commands for tasks, bugs, reports, usage tracking, setup diagnosis, and parallel worktrees.

In plain words
What is it for?
Use it to inspect audit status, create or run tasks and bug fixes, review or resume phases, generate reports, check setup, sync work items, choose manifest layout, and run phases in separate Git worktrees.
Why use it?
It organizes large or multi-step code maintenance so work can be planned, checked, resumed, reviewed, and tracked. The manifest records what phases and tasks belong to the audit.

Plugin for Claude Code

not rated 4 5d ago A scan tokens not measured original MIT
View the source file AleksandarBisevac/claude-plugins
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Claude Code
/plugin marketplace add AleksandarBisevac/claude-plugins
agentmods
npx agentmods add plugins/aleksandarbisevac/claude-plugins/audit
Clone the repo
git clone --depth 1 https://github.com/AleksandarBisevac/claude-plugins

Made for: Claude Code.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for audit

README.md
[![agentmods](https://agentmods.dev/badge/plugins/aleksandarbisevac/claude-plugins/audit.svg)](https://agentmods.dev/plugins/aleksandarbisevac/claude-plugins/audit)
Your own site
<a href="https://agentmods.dev/plugins/aleksandarbisevac/claude-plugins/audit"><img src="https://agentmods.dev/badge/plugins/aleksandarbisevac/claude-plugins/audit.svg" alt="Measured on agentmods" height="20"></a>
Per session not measured What this adds to a session before it is invoked.
When invoked not measured The manifest loads nothing itself; its 2 skills, 20 commands, 4 agents, 6 hooks cost 1,785 tokens a session between them.
Security scan A 1 finding. Scan, not verified.
Origin original No closer match found in the catalogue.
Security

Grade A, and why

audit scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Reads agent configuration directorieslowAgent snooping

.claude/, .codex/, .gemini/ hold keys, settings and other credentials a mod has no legitimate need for.

"description": "Manifest-driven, model-aware, test-driven audit/fix pipeline. Ships /audit:status|next|run|phase|review|resume|report (execution), /audit:init (multi-agent manifest generation with an approval gate — decl

Downgraded: this mod is about security review, or the phrase is quoted, so it is likely naming the pattern rather than instructing it.

plugins/audit/.claude-plugin/plugin.json · 28 lines

How it starts

The opening of the file, as written. The whole thing — 28 lines — stays where its author put it; the contents beside it link to each section on GitHub.

{
  "name": "audit",
  "version": "1.9.0",
  "description": "Manifest-driven, model-aware, test-driven audit/fix pipeline. Ships /audit:status|next|run|phase|review|resume|report (execution), /audit:init (multi-agent manifest generation with an approval gate — decline parks phases as proposals), /audit:propose (list/materialize/drop parked phase proposals), /audit:task (task creation), /audit:bug (bug tracking with red-first TDD fixes), /audit:sync (Azure DevOps work-item sync), /audit:usage (token spend attributed by phase/task/model/author/area, with cache economics, a monthly overview and trend), /audit:panel (local config + composition + usage control panel with skill/agent discovery), /audit:layout (choose the manifest layout in either direction: sharded for fewer tokens per phase + parallel-safe phases, single-file for one file and one diff; /audit:migrate stays as the legacy spelling of `layout sharded`), /audit:worktree (set up a git worktree for a phase to run it in a parallel session), /audit:doctor (diagnose the setup: interpreter, git root, config, manifest, plan-gate tier, capability policy, build runners, hooks), plus plan-first + secret-safety + token-logging + capability-policy + TDD-reminder guard hooks, and two auto-triggering skills so \"audit this codebase\" and \"what did that cost\" find it without knowing a command name. Reports render to standalone HTML + Markdown or publish to a shareable link. Parameterized per-repo via .claude/audit.config.json — no company/project coupling.",
  "author": {
    "name": "Aleksandar Bisevac",
    "email": "[email protected]"
  },
  "homepage": "https://github.com/AleksandarBisevac/claude-plugins",
  "repository": "https://github.com/AleksandarBisevac/claude-plugins",
  "license": "MIT",
  "keywords": [
    "audit",
    "orchestrator",
    "plan-first",
    "tdd",
    "hooks",
    "manifest",
    "bugs",
    "tasks",
    "multi-agent",
    "token-usage",
    "cost-tracking",
    "analytics",
    "diagnos

Read the full file on GitHub · 28 lines

Contents

What it installs

The manifest is a name and a version. 2 skills, 20 commands, 4 agents, 6 hooks travel with it, and installing the plugin installs all of them — 1,785 tokens a session between them. Each is measured on its own page, and each can be installed alone.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 3d ago First seen · 28 lines scan A 051973858bcb

Subscribe to this mod's changes

audit is a plugin published in the GitHub repository AleksandarBisevac/claude-plugins (4 stars, last pushed 5d ago), licensed MIT. Its token cost is not measured: this kind of file is read by the harness, not the model. A static security scan graded it A with 1 finding (reads agent configuration directories). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Code reviewTestingagentic-aiauditazure-devopsclaude-codeclaude-code-pluginclaude-code-plugins-marketplace
Related

Other plugins, from other repositories

bar-observatory

Local-only, deterministic flight recorder for Claude Code agent sessions. Five-channel effort ledger (T/R/L/Δ/E), report generation, and a read-only MCP query surface. Pure Rust + SQLite; nothing leaves your machine.

bar181/bar-observatory · not measured

agents-party

/party — one channel where your agent sessions talk to each other: Claude Code, Cursor, Codex or any other agent, on one machine or across machines.

1gr14/agents-party · not measured

cc-commands

CC command and agent compat fixture.

Sivan757/dsh-agent-plugins-market · not measured

skills

skills. High-quality Agent Skills made to perform reliably in real workflows.

zebbern/skills · not measured

before-you-build

Pre-build product risk review for founders, product teams, and AI-assisted builders before implementation starts.

wshobson/agents · not measured

humanizer

Rewrite AI-sounding text so it reads naturally without changing what it says.

blader/humanizer · not measured