Audit Implementation — Security skill for Claude Code
POST-IMPLEMENTATION AUDIT — analyzes what the implementing agent did wrong and why, proposes specific changes to CLAUDE.md / impl.md / impl-plan.md for approval, and appends new patterns to learnings.
How to install Audit Implementation
Installs to ~/.claude/skills/marioepkone-pipelineiq-audit-implementation/SKILL.md
mkdir -p ~/.claude/skills/marioepkone-pipelineiq-audit-implementation && curl -fsSL https://raw.githubusercontent.com/MarioEpkOne/PipelineIQ/HEAD/commands/audit-implementation.md -o ~/.claude/skills/marioepkone-pipelineiq-audit-implementation/SKILL.md Restart Claude Code, or start a new session, for it to be picked up.
What Audit Implementation does
POST-IMPLEMENTATION AUDIT — analyzes what the implementing agent did wrong and why, proposes specific changes to CLAUDE.md / impl.md / impl-plan.md for approval, and appends new patterns to learnings.md.
The user's request is: $ARGUMENTS
Purpose
This skill is a process autopsy, not a QA check. The goal is to understand *why* failures happened so the skills and rules can be improved for future implementations. Run this after every /impl. For auditing whether an implementation *plan* conform
Alternatives in Security
- Memory Self Review — Mine recent agent history (claude-mem + usage stats) for recurring failures and repeated patterns, audit MEMOR 297 ★
- Tool Approval Security Filter — You are a security filter for Claude Code tool execution 163 ★
- Spec Check — Audit GWT acceptance test specs for implementation leakage 149 ★
Full documentation available on GitHub
View Source RepositoryRelated Skills
Three Axes Audit
Stop and audit a rule violation. Usage: /three-axes-audit [what went wrong]. Names the violated Integrity Rule
Customer Changelog Check
Audit whether user-visible changes in the current session have matching CHANGELOG.md entries; report MISSING w
Pipeline Team
Orchestrates the full implementation pipeline (impl-plan -> impl -> audit -> fix -> merge) across multiple pre
Audit Security
Security audit (OWASP Top 10, PHP-specific vulnerabilities). Analyzes input validation, injection, authenticat
Citadel
Post-implementation conformance audit against the PRD, branch diff, and known trap doors.
Page Implement
Per-page implementation pipeline. Executes a locked code plan, runs post-execution parallel critique (code-rev
Related Agents
Self Audit
Post-loop, proposes-only self-audit — mines objective cost/perf/correctness signals via ${CLAUDE_PLUGIN_ROOT}/
LinkedIn Performance Review
Analyzes LinkedIn post results, maintains experiments, and proposes evidence-based learning (/review). Use whe
Ms Codebase Researcher
Analyzes project codebase for existing patterns, established libraries, past learnings, and conventions releva
