code-auditing

A code review and auditing guide with several modes for finding problems, simplifying code, or combining multiple review viewpoints. It includes instructions written partly in Chinese.

In plain words
What is it for?
Reviewing code for logical, type, or security issues; scanning project rules and common anti-patterns; consulting several reviewer perspectives; and simplifying or removing unused code.
Why use it?
It gives a structured way to inspect bugs, type-safety issues, security risks, repeated patterns, and unnecessary complexity. It can also guide direct refactoring and produce an audit report.

Skill for Claude CodeCodex

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add skills/vidyfoo/antigravity-skill-engine/code-auditing
Any agent
npx skills add VidyFoo/antigravity-skill-engine --skill code-auditing
Clone the repo
git clone --depth 1 https://github.com/VidyFoo/antigravity-skill-engine

Made for: Claude Code, Codex.

Per session 23 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 718 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00023 $0.00718
Opus 5 $0.00012 $0.00359
Sonnet 5 $0.00005 $0.00144
Haiku 4.5 $0.00002 $0.00072

Measured 2d ago against content hash f2070cffeedc, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

code-auditing scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.agent/skills/2-audit/code-auditing/SKILL.md · 72 lines

What it actually says

Systematic Auditor (v3.0)

Role: 质量的守护者。它不仅是 Code Reviewer,更是审计官(Auditor)和智囊团(Council)。


模式选择 (Mode Selection)

| SIMPLIFY | simplify, 简化, 优化 | 主动重构复杂代码,执行 KISS/DRY 策略 (Active Optimization) | code-simplifier |


1. REVIEW 模式 (专科医生)

路由到具体的专家 Persona 进行 Code Review (被动检查):

  • Silent Hunter: 查错 (Logical Bugs)
  • Type Architect: 查类型 (Type Safety)
  • Security Guard: 查安全 (Vulnerabilities)

2. AUDIT 模式 (体检中心)

执行协议

  1. 加载规则: 读取 .agent/rules/ 下的所有规则。
  2. 并行扫描: 使用 grep_search 批量检测反模式。
    • Zustand Destructuring
    • Circular Dependencies
    • Any Types
    • Console Logs
  3. 产出报告: 生成 doc/audits/audit-{date}.md

资源: audit-guide.md

3. COUNCIL 模式 (长老会)

执行协议

  1. 召集: 根据问题领域选择 3-5 位虚拟大神 (Personas)。
  2. 辩论: 模拟不同视角 (如 "Move Fast" vs "Be Correct")。
  3. 裁决: 输出综合行动建议。

资源: council-elders.md

4. SIMPLIFY 模式 (极简主义者)

"Less Code = Less Bugs"

核心能力

  • Active Refactoring: 不仅仅是提建议,而是直接修改代码
  • Dead Code Elimination: 积极删除未使用的 exports 和 components。
  • Logic Simplification: 将 if/else 嵌套展平,提取 Utility 函数。

执行协议

  1. Analyze: 识别复杂度热点 (Complexity Hotspots)。
  2. Plan: 提出重构方案 (Refactor Plan)。
  3. Execute: 使用 replace_file_content 执行原子化修改。
  4. Verify: 确保不破坏现有功能 (Type Check + Logical Verify)。

资源索引

资源文件 用途
audit-guide.md 高性能扫描指南 (Grep Patterns)
council-elders.md 大神人格矩阵
simplifier-checklist.md 极简重构检查单
Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2d ago First seen · 72 lines · 23 tokens per session scan A f2070cffeedc

Subscribe to this mod's changes

code-auditing is a skill published in the GitHub repository VidyFoo/antigravity-skill-engine (12 stars, last pushed 7mo ago), licensed MIT. It adds 23 tokens to every session and 718 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

Other skills, from other repositories

Skill Development

This skill should be used when the user wants to "create a skill", "add a skill to plugin", "write a new skill", "improve skill description", "organize skill content", or needs guidance on skill structure, progressive disclosure, or skill development best practices for Claude Code plugins.

dean9703111/ai-agent-skill-for-video-workflow · 63 tokens

SRT Card Annotator

This skill should be used when the user asks to "add reference cards to srt", "annotate srt with cards", "insert cards into subtitles", "generate srt with card annotations", "add 字卡 to srt", or needs to add contextual reference cards below subtitle text blocks in SRT files.

dean9703111/ai-agent-skill-for-video-workflow · 70 tokens

SRT Enhancer

This skill should be used when the user asks to "enhance srt subtitles", "optimize srt with original script", "fix srt typos from markdown", "compare srt with origin.md", "improve subtitle accuracy", "add spaces to srt", "優化 srt 逐字稿", "比對原稿修正字幕", or needs to refine SRT subtitle files by comparing them with an original…

dean9703111/ai-agent-skill-for-video-workflow · 98 tokens

SRT Social Summary

This skill should be used when the user asks to "generate social media summary from srt", "create platform-specific descriptions", "generate Facebook post from transcript", "create YouTube description from srt", "write Thread post from subtitles", "生成影片介紹", "根據逐字稿生成貼文", or needs to create engaging social media content…

dean9703111/ai-agent-skill-for-video-workflow · 91 tokens

Audio to SRT Converter

This skill should be used when the user asks to "convert audio to srt", "generate subtitles from audio", "create srt from mp3/wav/m4a/flac", "transcribe audio to subtitles", or needs to generate SRT subtitle files from audio files (MP3, WAV, M4A, FLAC, etc.) with customizable character limits and timeline adjustments.

dean9703111/ai-agent-skill-for-video-workflow · 85 tokens

agent-orchestrator

Meta-skill que orquestra todos os agentes do ecossistema. Scan automatico de skills, match por capacidades, coordenacao de workflows multi-skill e registry management.

sickn33/agentic-awesome-skills · 41 tokens