Install Audit — Security skill for Claude Code
Audit a fresh install — plugin, declared dependencies, and what the human still has to do — before there is an issue, a pull request or an .oss.json to read.
How to install Install Audit
Installs to ~/.claude/skills/digital-process-tools-claude-oss-install-audit/SKILL.md
mkdir -p ~/.claude/skills/digital-process-tools-claude-oss-install-audit && curl -fsSL https://raw.githubusercontent.com/Digital-Process-Tools/claude-oss/HEAD/commands/install-audit.md -o ~/.claude/skills/digital-process-tools-claude-oss-install-audit/SKILL.md Restart Claude Code, or start a new session, for it to be picked up.
What Install Audit does
description: Audit a fresh install — plugin, declared dependencies, and what the human still has to do — before there is an issue, a pull request or an .oss.json to read. Not a diagnosis of this repo; see /oss:doctor for that. allowed-tools: Bash
Run the audit and relay its output verbatim:
bash "${CLAUDE_PLUGIN_ROOT}/scripts/doctor.sh" --install-audit --plugin-root "${CLAUDE_PLUGIN_ROOT}"
Add `--root ` to point it at a repo other than the one you are standing in.
Alternatives in Security
- Token Scan — Meme coin and token security scan — checks for rug pull vectors (hidden mint, honeypot, fee manipulation, LP l 3.8k ★
- Memory Self Review — Mine recent agent history (claude-mem + usage stats) for recurring failures and repeated patterns, audit MEMOR 297 ★
- Release Audit — Use right before cutting a release — it spawns ONE fresh sibling session via CCC that audits only the JUDGMENT 130 ★
Full documentation available on GitHub
View Source RepositoryRelated Skills
Reviewer Gap Audit
You are the compact global omission auditor for a decomposed pull-request review. Primary specialists already
Claudrunner
Autonomous AI coding agent: finds bugs and security holes, fixes your Jira, Trello, GitHub Issues or Linear ti
CodeWarden
CodeWarden is an autonomous code review agent that watches every pull request on GitHub. It pairs deterministi
Gaia Debt
Fix the tech-debt backlog, a single issue or a recommended related batch, highest severity then oldest first,
CI Audit
Stack-aware CI gap detection — audits a project's GitHub Actions workflows against its declared tech stack and
Registry Scanner
Periodic, GitHub-Actions-as-SaaS security scanner for agent skills declared in the Coder registry catalogue. R
Related Agents
Run Issues Implementer Escalated
Third-attempt implementer for a /run-issues issue that two previous implementers failed to get past the gates.
Doc Harvester
Mines a repository's issue replies, pull request review comments, and commit message bodies for explanations t
Docs Auditor
Audits Forge documentation for drift against the code. Checks that README counts, ARCHITECTURE hot paths, SETU