Branch Audit — Security skill for Claude Code
Read-only audit of local branches, worktrees, and PR state.
How to install Branch Audit
Installs to ~/.claude/skills/moremeds-cstack-branch-audit/SKILL.md
mkdir -p ~/.claude/skills/moremeds-cstack-branch-audit && curl -fsSL https://raw.githubusercontent.com/moremeds/cstack/HEAD/commands/branch-audit.md -o ~/.claude/skills/moremeds-cstack-branch-audit/SKILL.md Restart Claude Code, or start a new session, for it to be picked up.
What Branch Audit does
description: Read-only audit of local branches, worktrees, and PR state. Classifies each as fully-merged / unique-work / stale / current and produces an action table. No destructive ops without explicit confirmation. allowed-tools: Bash, Read, TaskCreate, TaskUpdate, TaskList
Purpose
You repeatedly ask "scan the local branches and commits, see if anything is missed" or "all merged?" or for the cleanup table showing which branches/worktrees are safe to delete. This skill produces tha
Alternatives in Security
- Claude Code Security Review — An AI-powered security review GitHub Action using Claude to analyze code changes for security vulnerabilities 3.9k ★
- Pocketpaw — Your AI agent in 30 seconds 775 ★
- Perplexity Super Skills — Complete collection of 12 Perplexity Computer Super-Skills merging Perplexity + Claude Code capabilities acros 346 ★
Full documentation available on GitHub
View Source RepositoryRelated Skills
Worktree Janitor
Audit and clean up Claude Code worktrees in the current project. Lists every worktree with status, classifies
Git Crusade
Unleash parallel Git Purist agents to audit branches, commits, and worktrees across the codebase. No bad commi
Hygiene Audit
Audit repository hygiene — check for stale branches, worktrees, large files, missing metadata, CI health, and
Copy Audit
Non-destructive copy QA gate. Flags rule breaks (opening, banned tics, rhythm, dashes, facts, modality, distin
Audit Risk
Find new risk surfaces (dependencies, auth, payments, destructive data ops, outbound calls, secrets) since the
Migration Audit
Safety review of pending Supabase / Postgres migrations: destructive ops, locking impact on large tables, miss
Related Agents
Branch Janitor
Post-merge cleanup agent — after the human confirms a PR/branch merge, removes stale agent worktrees, deletes
Branch Gardener
Triages local branches and stashes in a managed repo (merged, stale, superseded, unpushed) and proposes deleti
GitHub Ops
Runs mechanical git/GitHub operations — creating or cleaning up worktrees and branches per the repo's own conv