Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add Mexregkan/claude-for-researchers --skill doc-auditgit clone --depth 1 https://github.com/Mexregkan/claude-for-researchersWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/mexregkan/claude-for-researchers/doc-audit)<a href="https://agentmods.dev/skills/mexregkan/claude-for-researchers/doc-audit"><img src="https://agentmods.dev/badge/skills/mexregkan/claude-for-researchers/doc-audit/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/mexregkan/claude-for-researchers/doc-audit"><img src="https://agentmods.dev/badge/skills/mexregkan/claude-for-researchers/doc-audit.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 1 finding, up to medium
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- medium Excessive Agency · line 25 Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.Fix: Add human-in-the-loop confirmation for destructive, irreversible, or high-impact operations. Never auto-execute commands that modify files, send data, or alter system state.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00140 | $0.02989 |
| Opus 5 | $0.00070 | $0.01494 |
| Sonnet 5 | $0.00028 | $0.00598 |
| Haiku 4.5 | $0.00014 | $0.00299 |
Grade A, and why
doc-audit scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 6d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 208 lines — stays where its author put it; the contents beside it link to each section on GitHub.
doc-audit — a hostile, evidence-bound read of one document
Why this exists
Every record in a research project — workbook section, strategy-map cell, big picture,
handoff message, paper — is written in the same pass, from the same context, as the claims
it records. Nobody reads it adversarially before it is relied on: the next session, the
other agent and your collaborator all read it as true. claim-audit guards the moment a
computation becomes prose. This skill treats the document as the object: is what it
says supported, typed, current, complete enough to learn from, and pointing at evidence
that still exists?
Everything editorial is deliberately removed. There is no recommendation to an editor and no author to address. The product is an evaluation you read, then decide what to change.
Usage
/doc-audit <path> # standard depth
/doc-audit <path> --depth quick # lint + headline ledger + drift; no verification
/doc-audit <path> --depth full # every row verified; all load-bearing rows to a fresh reader; citations verified
/doc-audit <path> --section "<\label or heading>" # one section of a large document
/doc-audit <path> --against <other-doc> # add an explicit drift target
/doc-audit <path> --recompute # allow re-running cited scripts (default: read existing logs only)
Typical targets: workbook.tex (or one of its sections/*.tex), bigPicture.tex,
strategy-map.md, brief.tex, handoff/msgs/*.md, a paper draft, a crash-course
appendix, CLAUDE.md. The rubric for each type is in rubrics.md; the
report shape is report-template.md.
Hard rules
- Never edit the document under audit, its siblings, or any research record during the audit. Proposed corrections go in the report as quoted before/after text. The user applies them, or asks for that in a separate turn.
- A verdict without evidence is not a verdict. Every ledger row carries a location
(
file:lineor\label), what was read or run, and what the check does not cover. - No manufactured dissent. A finding must be stateable as input → step → corrected
statement. If the corrected statement cannot be written, it is a
QUESTION, labelled as such — never dressed as an error. - Agreement is a result.
SUPPORTEDneeds the same evidence asOVERCLAIMED. "Looks right" is not evidence, and neither is "the strategy map says so": the strategy map is a co-claim written by the same process, and drift between records is itself a finding. - Do not launch long computations unless
--recomputewas given. Evidence tracing reads scripts, logs and outputs that already exist. - Cover the answer while you derive. For any row you re-derive, read only the inputs, write your value down, then compare. If the document's answer went past your eyes first, write contaminated in the row.
- Never claim anything was recorded unless the file was written in the same turn.
What ships with it
4 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 6d ago First seen · 208 lines · 140 tokens per session scan A ccd433b7049e
doc-audit is a skill published in the GitHub repository Mexregkan/claude-for-researchers (52 stars, last pushed 8d ago), licensed MIT. It adds 140 tokens to every session and 2,989 once invoked, about $0.0007 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-05.
Other skills, from other repositories
latex
Compile one specified LaTeX document, resolve build errors, audit citations, and report build quality. Use when a .tex source must be built or a concrete compilation failure repaired. Not for corpus-wide build checks, visual polish after a clean build, or creating a project; use $latex-health-check, $latex-polish, or…
beamer-deck
Create an academic presentation as a LaTeX Beamer source and reviewed PDF with an original theme. Use when the requested deliverable is a conference, seminar, or lecture deck in Beamer. Not for PowerPoint or RevealJS; use $pptx or $quarto-deck.
bib-parse
Extract citations from a PDF and generate a validated .bib file. Use when the user asks to extract citations from a PDF and generate a validated .bib file. Reads the PDF, identifies referenced works, constructs BibTeX entries, and verifies metadata.
latex-template
Compare a project's LaTeX preamble and conventions against the canonical working-paper template. Use when diagnosing template drift without converting venue formats or editing prose.
review-response
Systematic reviewer response workflow: parse comments, classify by severity, develop response strategy, write structured rebuttal. Use when asked to 'write rebuttal', 'respond to reviewers', 'draft review response', or 'handle R&R'.
latex-health-check
Compile all LaTeX projects and report cross-project build consistency. Use when checking whether a collection of papers builds cleanly. Not for rendered visual inspection after a clean build; use $latex-polish.