raaaf

Audit Learning Agent — Security agent for Claude Code

Security community

Analyzes past audit logs, detects patterns, and returns a structured retro for the orchestrator to write.

How to install Audit Learning Agent

Installs to ~/.claude/agents/raaaf-claude-skills-audit-learning-agent.md

Terminal

mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/raaaf/claude-skills/HEAD/agents/audit-learning-agent.md -o ~/.claude/agents/raaaf-claude-skills-audit-learning-agent.md

Restart Claude Code, or start a new session, for it to be picked up.

What Audit Learning Agent does

name: audit-learning-agent description: Analyzes past audit logs, detects patterns, and returns a structured retro for the orchestrator to write. Read-only, never writes to .claude/ itself. Used by the /audit and /full-audit skills. tools:

Read
Grep
Glob model: sonnet effort: low

Audit Learning Agent

You are dispatched at the end of an audit or plan run to analyze past logs and return a retro. Your own task prompt names the exact instruction file to read and follow — typi

Alternatives in Security

Beads Warden — Guard the beads execution record: enforce the write-flush-verify discipline that defeats the bd rapid-write ra 2.7k ★
Dr Audit — Sub-agent prompt: audit Decision Records in an implementation-plan.md for canonical form and reference resolut 432 ★
Security Verifier — You write and execute PoC tests to PROVE bugs exist 215 ★