Audit Flow — Security skill for Claude Code
Claude Code skill for interactive system flow tracing across CODE, API, AUTH, DATA, NETWORK layers.
How to install Audit Flow
This entry records only its repository, not the path inside it, so there is no
exact command to give. Open ArunJRK/audit-flow and copy the folder into
~/.claude/skills/, or the file into ~/.claude/agents/.
What Audit Flow does
Claude Code skill for interactive system flow tracing across CODE, API, AUTH, DATA, NETWORK layers. SQLite persistence, Mermaid export, git merge driver.
Alternatives in Security
- Agent Memory Vault — Markdown-first shared memory vault for Claude Code and Codex with SQLite, Zvec, Git, closeout, and audit 314 ★
- Code Overhaul — Audit a codebase for maintenance and modernization 94 ★
- Claude Warden — Security hooks and monitoring for Claude Code — quiet overrides, SSRF protection, MCP compression, OTEL tracin 60 ★
README
auditflow
Think before you build. Audit after you ship.
An [Agent Skill](https://agentskills.io) for thinking about systems before (and after) you build them.
Tell your AI agent to trace a flow — it walks through your codebase recording every step in SQLite, then exports Mermaid diagrams, Markdown reports, JSON, and YAML. Works with [Claude Code](https://docs.anthropic.com/en/docs/claude-code), [OpenAI Codex CLI](https://github.com/openai/codex), and any agent that supports the [Agent Skills spec](https://agentskills.io/specification).
Why
Most teams jump straight to code. The architecture lives in someone's head, a stale Confluence page, or a whiteboard photo rotting in Slack.
audit-flow makes system thinking a first-class artifact:
- Before building — sketch the flow as a DAG. Which layers? What triggers what? Where does data move? Your brainstorm session produces a queryable database and exportable diagrams, not ephemeral notes.
- After building — trace the real implementation. Compare what you planned vs what you built. The ideation flow and the documentation flow live in the same database.
- When things break — trace the bug path. Your incident post-mortem links back to the original design flow. Findings accumulate across sessions.
- Over time — 10 audits later, you have a queryable map of your entire system. New engineer joins?
audit.py listshows every flow ever traced.
It's TDD for architecture. Trace the flow f
Related Skills
Autoconst Claude Construction Cfo
Deterministic construction-CFO pipeline: QuickBooks export -> reconciled Excel management pack (job cost, rete
iOS Design Review
Interactive HIG/UX design review of an iOS screen (screenshot + code), then a 12-dimension audit, phased polis
Slack MCP
Multi-workspace Slack MCP server for Claude Code. xoxc/xoxp/xoxb auth, draft+confirm on writes, vault auto-exp
Guardskill
Read-only scanner for git settings that let a repository run code in coding agents (Claude Code, Codex, Cursor
Find Wasted Effort
Run the find-wasted-effort audit — the process-per-outcome (ceremony) sibling of /token-waste-audit. Parses Fl
Gitdoctor
One-command Git Flow for AI coding agents — start, finish, tag and audit releases from Claude Code or Cursor.
Related Agents
Shine Data Engineer
Local data analysis via DuckDB/SQLite MCP — SQL on CSV/Parquet/JSON/Excel without cloud services. Produces cha
Shep Migration Creator
Creates ONE new SQLite schema migration file under packages/core/src/infrastructure/persistence/migrations/, f
Rust Backend Architect
Primary reviewer for the Rust/Tauri backend — domain modeling, error handling, module boundaries (L0–L3 layers