kevanwee

Citecheck — Security skill for Claude Code

Security community

Audit every legal citation in a draft: extract deterministically, prove each authority exists, then verify it supports the proposition it is cited for.

How to install Citecheck

This entry records only its repository, not the path inside it, so there is no exact command to give. Open kevanwee/citecheck and copy the folder into ~/.claude/skills/, or the file into ~/.claude/agents/.

What Citecheck does

Audit every legal citation in a draft: extract deterministically, prove each authority exists, then verify it supports the proposition it is cited for. Library, CLI and Claude skill.

Alternatives in Security

Token Scan — Meme coin and token security scan — checks for rug pull vectors (hidden mint, honeypot, fee manipulation, LP l 3.8k ★
05 Source Citation Audit — Source Citation Audit 1.1k ★
Tech Debt Skill — Claude Code skill that produces a thorough, file-cited tech debt audit of an entire codebase 590 ★

README

citecheck

Find every authority cited in a draft. Prove each one exists. Then check it says what the draft says it says.

The first two steps are a deterministic library and CLI. The third is a Claude skill that uses whatever retrieval tools are in the session. The split is deliberate: regexes do not hallucinate, and models should not be trusted to extract citations from page 40 of a brief.

$ citecheck submissions.docx -m matter-bundle.json --strict

# Citation check

8 unique citations: 2 exist, 1 NOT FOUND, 0 ambiguous, 5 unchecked.  Strict mode: unresolved citations fail the check.

| # | Citation                       | Kind         | Status        | Source   | Cited for                                  |
|---|--------------------------------|--------------|---------------|----------|--------------------------------------------|
| 1 | [2013] SGCA 43 at [101] (x2)   | case_neutral | EXISTS        | manifest | The test for implying a term in fact is ... |
| 3 | [2024] SGHC 987 at [44]        | case_neutral | **NOT_FOUND** | manifest | ... more recently in [2024] SGHC 987 ...    |
...
$ echo $?
1

Why

Lawyers have been sanctioned in several jurisdictions for filing documents containing citations that do not exist. Every legal MCP server and research tool on offer *retrieves* law. None of them take a finished draft and audit it. This is the auditor.

What it does

Step	Where	How
1. Extract	library	Regex patterns for SG (neutral, SLR, statutes), UK (neutral, reports), AU (neutral, reports). Deduplicated, with pinpoints and the sentence each sits in.
2. Resolve	library	Offline by default via a JSON manifest (bundle index, firm library). Opt-in HTTP existence check against canonical URLs.
3. Verify proposition	skill	The assistant reads the authority and classifies: SUPPORTS / OVERSTATES / DOES_NOT_ADDRESS / CONTRADICTS / CANNOT_VERIFY, with quotations.
4. Currency	skill	Reversed / overruled / doubted