Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/ww-w-ai/bkit-claude-code/auditnpx skills add ww-w-ai/bkit-claude-code --skill auditgit clone --depth 1 https://github.com/ww-w-ai/bkit-claude-codeWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/ww-w-ai/bkit-claude-code/audit)<a href="https://agentmods.dev/skills/ww-w-ai/bkit-claude-code/audit"><img src="https://agentmods.dev/badge/skills/ww-w-ai/bkit-claude-code/audit.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00088 | $0.01699 |
| Opus 5 | $0.00044 | $0.00849 |
| Sonnet 5 | $0.00018 | $0.00340 |
| Haiku 4.5 | $0.00009 | $0.00170 |
Grade A, and why
audit scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 6d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 230 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Audit Skill
User-invocable skill for viewing audit logs, decision traces, and session history.
Arguments
| Argument | Description | Example |
|---|---|---|
| (none) | Show recent audit log entries (same as log) |
/audit |
log |
Show recent audit log entries (last 20) | /audit log |
trace <feature> |
Show decision traces for a feature | /audit trace user-auth |
summary |
Show daily/weekly audit summary | /audit summary |
search <query> |
Search audit logs by action type, feature, or date | /audit search "phase_transition" |
Action Details
log (Default)
Display recent audit log entries.
- Read today's audit log from
.bkit/audit/YYYY-MM-DD.jsonl - If today's log is empty or has fewer than 20 entries, also read yesterday's log
- Parse JSONL entries (one JSON object per line)
- Display the last 20 entries in reverse chronological order
- Format each entry with timestamp, action, feature, and details
JSONL Entry Schema:
{
"timestamp": "2026-03-19T10:30:00.000Z",
"action": "phase_transition",
"feature": "user-auth",
"from": "plan",
"to": "design",
"automationLevel": "semi-auto",
"triggeredBy": "user",
"details": "Plan approved, transitioning to Design"
}
Output Format:
--- Audit Log (Last 20 Entries) -------------------
[2026-03-19 10:30] phase_transition | user-auth
plan -> design (Semi-Auto, user-triggered)
[2026-03-19 10:25] checkpoint_created | user-auth
Checkpoint cp-1710842700000 before Design phase
[2026-03-19 10:20] automation_level_changed | -
L1 -> L2 (trust score: 72)
...
---------------------------------------------------
Total entries today: 45
trace
Show decision traces for a specific feature.
- Read decision trace files from
.bkit/decisions/YYYY-MM-DD.jsonl - Filter entries matching the specified feature
- Display chronological decision chain with rationale
Decision Trace Entry Schema:
{
"timestamp": "2026-03-19T10:30:00.000Z",
"feature": "user-auth",
"decision": "advance_to_design",
"rationale": "Plan document complete, matchRate N/A at this phase",
"alternatives": ["request_plan_revision", "skip_to_do"],
"chosenBecause": "Plan deliverable exists and passes validation",
"automationLevel": "semi-auto",
"confidence": 0.92
}
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 6d ago First seen · 230 lines · 88 tokens per session scan A 529672736147
audit is a skill published in the GitHub repository ww-w-ai/bkit-claude-code (595 stars, last pushed 19d ago), licensed Apache-2.0. It adds 88 tokens to every session and 1,699 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
ai-native-sdlc
Run the AI-native SDLC loop — Plan, Design, Build, Test, Deploy, Maintain — with versioned artifacts and human approval gates at every handoff. Use when the user states a goal, idea, feature, or change request and expects the agent to scaffold and drive the project through the full lifecycle instead of jumping…
deep-research
Professional deep research report generation — multi-agent collaboration with parallel chapter writing, automatic latest-data targeting, multilingual output, and built-in quality checks.
code-auditor
Independent pre-merge review of a git diff, PR, or named files. Use when the user asks to review a PR, inspect current git changes, or hunt functional regressions, missed scenarios, wrong assumptions, concurrency bugs, and test gaps as an independent reviewer who does not defend the author's approach /…
三月七 Agent 角色扮演
让AI Agent以《崩坏：星穹铁道》看板娘「三月七」的语气、思维方式和人设完成所有任务—— 回答、思考、编写文档、写代码、分析数据等。三月七自称"本姑娘"，称呼对话发起者为"开拓者"。 支持中文、英文、日文、韩文四种语言。 当用户明确要求"用三月七的风格"、"像三月七一样"、"按三月七人设"等指令时触发； 也可由用户通过 /march7 命令手动调用。.
sast-horusec
Multi-language static application security testing using Horusec with support for 18+ programming languages and 20+ security analysis tools. Performs SAST scans, secret detection in git history, and provides vulnerability findings with severity classification. Use when: (1) Analyzing code for security vulnerabilities…
notebooklm-slides
This skill should be used when generating pedagogically-aligned slide decks from educational content using NotebookLM. It addresses the convergence toward generic, text-heavy slides by providing structured prompts that create engaging, proficiency-appropriate presentations aligned with specific educational frameworks.