strata:audit-config

strata:audit-config is a skill for Claude Code from gideondk/strata. It costs 83 tokens per session (530 once invoked), scanned A, original, MPL-2.0.

A read-only review of a project's Claude Code configuration, including its instructions, settings, skills, agents, and ignored files.

In plain words
What is it for?
Use it every few months, after a major Claude model release, before onboarding a team, or when the agent's behavior seems off. It checks files such as CLAUDE.md, .claude/settings.json, and .claudeignore.
Why use it?
Configuration can become outdated as a codebase, team, or model changes. The review identifies items that have not been updated within a chosen number of days.

Skill for Claude Code

Written for Claude Code: disable-model-invocation in frontmatter. Also seen: reads .claude/ paths; mentions CLAUDE.md; mentions subagents.

Runs only inside its plugin — its command needs a path that Claude Code sets for a plugin’s own hooks and for nothing else. Install the plugin, not this.

Part of the strata plugin — 24 skills, 2 agents, 5 hooks, 1 MCP server shipped together

Install

Getting it into your agent

This one installs as part of its plugin. Adding the marketplace and installing the plugin brings it with everything else the plugin ships.

Claude Code
/plugin marketplace add gideondk/strata
Claude Code
/plugin install strata

Made for: Claude Code.

Or install strata, the plugin that ships this one along with the rest of its 24 skills, 2 agents, 5 hooks, 1 MCP server.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for strata:audit-config

README.md
[![agentmods](https://agentmods.dev/badge/skills/gideondk/strata/audit-config.svg)](https://agentmods.dev/skills/gideondk/strata/audit-config)
Your own site
<a href="https://agentmods.dev/skills/gideondk/strata/audit-config"><img src="https://agentmods.dev/badge/skills/gideondk/strata/audit-config.svg" alt="Measured on agentmods" height="20"></a>
Per session 83 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 530 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00083 $0.00530
Opus 5 $0.00042 $0.00265
Sonnet 5 $0.00017 $0.00106
Haiku 4.5 $0.00008 $0.00053

Measured 6d ago against content hash 38a362af8b3f, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-06, from the pricing page.

Security

Grade A, and why

strata:audit-config scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 6d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

skills/audit-config/SKILL.md · 58 lines

What it actually says

strata:audit-config

Anthropic's 2026 guidance on Claude Code in large codebases:

Teams should expect to do a meaningful configuration review every three to six months, but it's also worth doing one whenever performance feels like it's plateaued after major model releases.

Instructions optimized for older models can work against a future one.

This skill is the operational reminder. It walks your project's Claude Code Config and reports items that haven't been touched in --stale-days (180 by Default), so you can revisit them deliberately.

When to run

  • Every 3–6 months as a scheduled habit
  • After a major Claude model release (Anthropic-recommended)
  • Before onboarding a new team to the codebase
  • When Claude's behaviour starts feeling sluggish or off

How

# Default: 180-day staleness threshold
"${CLAUDE_PLUGIN_ROOT}/bin/strata" audit-config

# Tighter cadence
"${CLAUDE_PLUGIN_ROOT}/bin/strata" audit-config --stale-days 90

What it covers

File / dir Why it matters
CLAUDE.md Loaded every session; conventions drift
.claude/settings.json Team config; check enabled plugins are still relevant
.claudeignore Exclusion rules go stale as the repo evolves
.claude/skills/ Project-local skills — same drift risk
.claude/agents/ Sub-agent definitions — same

Read-only, never modifies. Output is a markdown report you can paste into a Review meeting.

Pairs well with

  • /strata:review — audits the vault (decisions, lessons, domain notes)
  • /strata:audit-config — audits the project's Claude Code setup

Different surfaces. Run both on the same cadence.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 6d ago First seen · 58 lines · 83 tokens per session scan A 38a362af8b3f

Subscribe to this mod's changes

strata:audit-config is a skill published in the GitHub repository gideondk/strata (5 stars, last pushed 1mo ago), licensed MPL-2.0. It adds 83 tokens to every session and 530 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Related

Other skills, from other repositories

my-wiki

Manage local OKF-compatible Markdown My Wiki vaults with an AI agent. Use for capturing webpages, PDFs, Office documents, notes, images, folders, and ZIP bundles as References; maintaining Reference-to-Concept evidence links; searching or answering from a vault; checking or repairing vault health; switching among…

NimaChu/my-wiki · 78 tokens

phase-orchestrator

Orchestrates phase-based implementation plans using the host's todo tracker and subagents for implementation, review, validation, default phase commits, plan finalization, and a final end-to-end review. Delegates work through the companion phase-implementer, phase-reviewer, and phase-final-reviewer skills and consumes…

hraness/kb · 101 tokens

save-to-favorites

The single complete Pickoo workflow for new Xiaohongshu, WeChat, Douyin, Bilibili, Xiaoyuzhou, podcast, music, article/blog, or general web links. Use for 收藏、保存、收录、抓取、归档、拆解、分析、OCR、ASR or 完整处理 from Codex, WorkBuddy, Hermes, Claude, or Claudian. It owns intake and the complete downstream workflow; obsolete standalone…

KristenPan/pickoo-your-favorites · 110 tokens

asset-review-agent

Independently review source-extracted quote, viewpoint, hook, and structure candidates. Image and shot assets are outside automatic review and enter only after explicit user interaction.

KristenPan/pickoo-your-favorites · 37 tokens

kb

Set up, evolve, or operate a hraness/kb local-first Markdown knowledge base for coding-agent memory. Use when a user asks to design KB conventions or a recurring KB ritual; search or query a KB or Obsidian vault; load or recover repository context, plans, decisions, concepts, backlinks, semantic search, or Git…

hraness/kb · 155 tokens

course-builder

Use whenever the user wants to ingest a new course's materials (lecture notes, textbook chapters, HW problems, HW solutions) and build the course-specific knowledge base — patterns.md (recurring solution techniques), coverage.md (HW-to-section map with 🔥 exam tiers + ⚠weak flags), and summary.md (topic tree). Invoked…

OPTIMETA/PAIDEIA · 119 tokens