self-audit

Name: self-audit
Author: faizkhairi

61stars19forks

How to install self-audit?

faizkhairi/claude-code-blueprint/self-audit

$npx -y skills add faizkhairi/claude-code-blueprint --skill self-audit

Installs into the current project.

Summary

Run the verify-plan checklist against YOUR OWN plan before finalizing it (before ExitPlanMode), with special emphasis on the consumer audit. Triggers on: 'audit yourself', 'self-audit', 'check your own plan', 'did you check everything', 'verify before exit plan', or automatically

Files · 1

View on GitHub

SKILL.md

1	Self-audit YOUR OWN plan before ExitPlanMode. This is an attention-gap backstop: the verify-plan checklist already exists in this blueprint (the `verify-plan` agent), but knowing a check and applying it at the right moment are different things. This skill forces the full checklist to run against the plan you just wrote, catching blind spots you missed while heads-down in planning.
2
3	## When this runs
4
5	- Automatically: before every non-trivial `ExitPlanMode` (per the Plan-First rule in CLAUDE.md). A plan is non-trivial if it touches more than one file, changes behavior, or modifies config or a shared resource.
6	- On demand: when the user says "audit yourself", "did you check everything", and similar.
7
8	Skip only for genuinely trivial plans (a single-line typo fix).
9
10	## What it does
11
12	1. Read the current plan: the plan file named in the plan-mode system message.
13	2. Run the verify-plan checklist against the plan, IN ORDER. Do not re-derive it: spawn the `verify-plan` agent (or read `agents/verify-plan.md` and follow its checklist) so the same checks that would review someone else's plan now review yours. Report a table: Check \| Status (PASS / FAIL / UNCLEAR) \| Finding.
14	3. Emphasis on the Consumer Audit, the highest-value and most-missed check:
15	- Identify every SHARED RESOURCE the plan changes: a token or credential, an env key, a file path, a DB table, an API field, or any string referenced from more than one place.
16	- For each, grep BOTH the target repo AND your own global config, because a repo-only search misses consumers that live in your personal setup:
17	```bash
18	# Repo:
19	grep -rn "<resource>" .
20	# Your own global config (adjust to your layout):
21	grep -rn "<resource>" ~/.claude/skills ~/.claude/agents ~/.claude/hooks ~/.claude/rules
22	```
23	- Every hit is a consumer. Ask: "does the plan repoint or update this, or will it break silently?" If a consumer is not handled in the plan, that is a FAIL: add it to the plan before exiting.
24	- This is the exact class of miss where a plan updates a shared value in the repo but leaves stale references in the user's own global config (a repo-only audit reports "zero consumers" while several live outside the repo).
25	4. On any FAIL: fix the plan file first, then re-run the failed checks. Only proceed to ExitPlanMode when the audit is clean, or the remaining items are explicitly accepted or deferred with a reason.
26
27	## Output
28
29	A Check \| Status \| Finding table, then one line: AUDIT CLEAN: safe to ExitPlanMode, or N FINDINGS: fixing plan before exit (with the fixes applied to the plan file).
30
31	## What this does NOT do
32
33	- It does not review a code diff (a diff review is a separate concern, after the plan is executed).
34	- It does not run tests (that is post-execution verification).
35	- It does not duplicate the checklist: it runs the `verify-plan` checks as-is.

People who liked this also viewed

6 picks

Type

self-audit

61stars19forks

View on GitHub

How to install self-audit?

faizkhairi/claude-code-blueprint/self-audit

$npx -y skills add faizkhairi/claude-code-blueprint --skill self-audit

Installs into the current project.

Summary

Files · 1

View on GitHub

SKILL.md

1	Self-audit YOUR OWN plan before ExitPlanMode. This is an attention-gap backstop: the verify-plan checklist already exists in this blueprint (the `verify-plan` agent), but knowing a check and applying it at the right moment are different things. This skill forces the full checklist to run against the plan you just wrote, catching blind spots you missed while heads-down in planning.
2
3	## When this runs
4
5	- Automatically: before every non-trivial `ExitPlanMode` (per the Plan-First rule in CLAUDE.md). A plan is non-trivial if it touches more than one file, changes behavior, or modifies config or a shared resource.
6	- On demand: when the user says "audit yourself", "did you check everything", and similar.
7
8	Skip only for genuinely trivial plans (a single-line typo fix).
9
10	## What it does
11
12	1. Read the current plan: the plan file named in the plan-mode system message.
13	2. Run the verify-plan checklist against the plan, IN ORDER. Do not re-derive it: spawn the `verify-plan` agent (or read `agents/verify-plan.md` and follow its checklist) so the same checks that would review someone else's plan now review yours. Report a table: Check \| Status (PASS / FAIL / UNCLEAR) \| Finding.
14	3. Emphasis on the Consumer Audit, the highest-value and most-missed check:
15	- Identify every SHARED RESOURCE the plan changes: a token or credential, an env key, a file path, a DB table, an API field, or any string referenced from more than one place.
16	- For each, grep BOTH the target repo AND your own global config, because a repo-only search misses consumers that live in your personal setup:
17	```bash
18	# Repo:
19	grep -rn "<resource>" .
20	# Your own global config (adjust to your layout):
21	grep -rn "<resource>" ~/.claude/skills ~/.claude/agents ~/.claude/hooks ~/.claude/rules
22	```
23	- Every hit is a consumer. Ask: "does the plan repoint or update this, or will it break silently?" If a consumer is not handled in the plan, that is a FAIL: add it to the plan before exiting.
24	- This is the exact class of miss where a plan updates a shared value in the repo but leaves stale references in the user's own global config (a repo-only audit reports "zero consumers" while several live outside the repo).
25	4. On any FAIL: fix the plan file first, then re-run the failed checks. Only proceed to ExitPlanMode when the audit is clean, or the remaining items are explicitly accepted or deferred with a reason.
26
27	## Output
28
29	A Check \| Status \| Finding table, then one line: AUDIT CLEAN: safe to ExitPlanMode, or N FINDINGS: fixing plan before exit (with the fixes applied to the plan file).
30
31	## What this does NOT do
32
33	- It does not review a code diff (a diff review is a separate concern, after the plan is executed).
34	- It does not run tests (that is post-execution verification).
35	- It does not duplicate the checklist: it runs the `verify-plan` checks as-is.

People who liked this also viewed

6 picks

Type