EivindKjosbakken

Audit Session — Security skill for Claude Code

Security community

Find your own most-violated CLAUDE.md rules by auditing recent session transcripts.

How to install Audit Session

Installs to ~/.claude/skills/eivindkjosbakken-claude-code-setup-pack-audit-session/SKILL.md

Terminal

mkdir -p ~/.claude/skills/eivindkjosbakken-claude-code-setup-pack-audit-session && curl -fsSL https://raw.githubusercontent.com/EivindKjosbakken/claude-code-setup-pack/HEAD/commands/audit-session.md -o ~/.claude/skills/eivindkjosbakken-claude-code-setup-pack-audit-session/SKILL.md

Restart Claude Code, or start a new session, for it to be picked up.

What Audit Session does

description: Find your own most-violated CLAUDE.md rules by auditing recent session transcripts

/audit-session

Find which of my instructions the agent is actually failing to follow, ranked by frequency, so I mechanise the expensive ones instead of guessing.

What to do

**Locate recent transcripts.** They live under `~/.claude/projects//*.jsonl`, one file per session. Take the last 7 days unless I gave you a different window.
**Read my rules.** L

Alternatives in Security

Memory Self Review — Mine recent agent history (claude-mem + usage stats) for recurring failures and repeated patterns, audit MEMOR 297 ★
Cross-Pollinate Hex MCP Servers — Diff-driven audit: find real transferable changes across hex-line-mcp, hex-ssh-mcp, hex-graph-mcp 238 ★
Hardstop Audit Log — Show recent entries from the Hardstop audit log, including blocked and allowed commands 22 ★