A collection of auditing checks for continuous integration, scripts, security, skills, workspaces, Three.js, React, and test suites. Continuous integration is the automated process that builds and tests code after changes.

Use it when reviewing CI configuration, scripts, security-related code, agent skills, workspace setup, Three.js or React projects, and test suites.

It helps identify problems in code, automation, project setup, and tests before they cause failures or make maintenance harder. The description does not specify the individual checks.

audit — Plugin for Claude Code by edloidas/skills

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Clone the repo

git clone --depth 1 https://github.com/edloidas/skills

Made for: Claude Code.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

README.md

[![agentmods](https://agentmods.dev/badge/plugins/edloidas/skills/audit/github.svg)](https://agentmods.dev/plugins/edloidas/skills/audit)

Your own site

<a href="https://agentmods.dev/plugins/edloidas/skills/audit"><img src="https://agentmods.dev/badge/plugins/edloidas/skills/audit/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

Your own site · 80×15

<a href="https://agentmods.dev/plugins/edloidas/skills/audit"><img src="https://agentmods.dev/badge/plugins/edloidas/skills/audit.svg" alt="Reviewed on agentmods" width="80" height="20"></a>

Per session not measured What this adds to a session before it is invoked.

When invoked not measured The manifest loads nothing itself; its 8 skills cost 537 tokens a session between them.

Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.

Origin original No closer match found in the catalogue.

Security

Grade A, and why

audit scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured today.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

audit/.claude-plugin/plugin.json · 21 lines

What it actually says

{
  "name": "audit",
  "version": "5.18.0",
  "description": "CI, package setup, security, skill, tsconfig, Three.js, React, and test-suite auditing skills",
  "author": {
    "name": "Mikita Taukachou",
    "url": "https://edloidas.io"
  },
  "repository": "https://github.com/edloidas/skills",
  "license": "MIT",
  "keywords": [
    "skills",
    "audit",
    "ci",
    "workspace",
    "scripts",
    "react",
    "tests"
  ]
}

Contents

What it installs

The manifest is a name and a version. 8 skills travel with it, and installing the plugin installs all of them — 537 tokens a session between them. Each is measured on its own page, and each can be installed alone.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

today Changed 6fff4a29a3fd
4d ago Changed c694e18a25a4
13d ago Changed 2ddf1c21fd63
16d ago Changed 55c043d5f4e1
21d ago Changed d5b91154bc51
23d ago Changed 6a2a57d62f16
24d ago Changed 65841451cff5
27d ago Changed 7b2bb16c0825
1mo ago Changed a6f2ef44e8b7
1mo ago First seen · 21 lines scan A 49e297e69853

Subscribe to this mod's changes

audit is a plugin published in the GitHub repository edloidas/skills (2 stars, last pushed today), licensed MIT. Its token cost is not measured: this kind of file is read by the harness, not the model. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Claude Code Code review Frontend Security Testing agent-skills agentic-ai ai-agents automation

odh-code-quality

CodeRabbit review triage and project-conformant unit test generation.

opendatahub-io/ai-helpers · not measured

code-oz

Enforced SDLC gates + cross-family review for AI coding agents. Discovers and invokes the code-oz engine; the binary is the only writer of gates, events, and reviews.

omerakben/code-oz · not measured

forgedock

Autonomous AI development pipeline that uses GitHub as a structured knowledge graph for Claude Code agents. Adds /work-on, /review-pr, /quality-gate, /orchestrate, and 20+ pipeline commands.

RapierCraftStudios/ForgeDock · not measured

xonovex-core

Apply software design, testing, review, version control, credentials, and accessibility practices.

xonovex/platform · not measured

ivuorinen-skills

Nitpicker — hostile audit toolkit: /nitpicker dispatches specialist audit commands (adversarial review, security, tests, docs, types, architecture, perf, reliability, caching, concurrency, error handling, leaks, deps, licensing, CI, commits, migrations, observability, API contracts, a11y, i18n, privacy, confi.

ivuorinen/skills · not measured

pr-swarm

Multi-agent PR review swarm and review-triage skills.

nicholls-inc/claude-code-marketplace · not measured