benyoskovitz

Session Audit — Security skill for Claude Code

Security community

Self-audit pass over CLAUDE.md rules and memory files.

How to install Session Audit

Installs to ~/.claude/skills/benyoskovitz-claude-code-workflow-session-audit/SKILL.md

Terminal

mkdir -p ~/.claude/skills/benyoskovitz-claude-code-workflow-session-audit && curl -fsSL https://raw.githubusercontent.com/benyoskovitz/claude-code-workflow/HEAD/commands/session-audit.md -o ~/.claude/skills/benyoskovitz-claude-code-workflow-session-audit/SKILL.md

Restart Claude Code, or start a new session, for it to be picked up.

What Session Audit does

Self-audit pass over CLAUDE.md rules and memory files. Surfaces stale rules, undocumented workarounds, and contradictions between memory and current code. Read-only by default, never modifies CLAUDE.md or memory without explicit confirmation.

This pairs with `/session-end` (which it used to be part of) and with the workflow-meta lab: session-end is the deterministic wrap-up, session-audit keeps the ruleset honest on its own cadence.

**When to run:**

After a long session where you referenced

Alternatives in Security

Memory Self Review — Mine recent agent history (claude-mem + usage stats) for recurring failures and repeated patterns, audit MEMOR 297 ★
Prompt Audit — Audit of Claude Code's default system prompt behavioral instructions 69 ★
MCP Geo — Track brand citations across seven AI search surfaces 46 ★