Muhammadatef

Kakashi Audit — Security skill for Claude Code

Security community

Full audit -- DELIBERATELY exposes original -> token mapping (only run when asked).

How to install Kakashi Audit

Installs to ~/.claude/skills/muhammadatef-kakashi-kakashi-audit/SKILL.md

Terminal

mkdir -p ~/.claude/skills/muhammadatef-kakashi-kakashi-audit && curl -fsSL https://raw.githubusercontent.com/Muhammadatef/kakashi/HEAD/commands/kakashi-audit.md -o ~/.claude/skills/muhammadatef-kakashi-kakashi-audit/SKILL.md

Restart Claude Code, or start a new session, for it to be picked up.

What Kakashi Audit does

description: Full audit -- DELIBERATELY exposes original -> token mapping (only run when asked)

Audit the file $ARGUMENTS using kakashi.

Steps

Warn the user FIRST: "Running audit will print every original secret value alongside its masked token to this conversation. The agent (me) will see those secrets. Confirm you want to proceed."
Only if confirmed (or the user explicitly asked for audit), run in shell: kakashi audit "$ARGUMENTS" (fall back to `npx -y @muhammada

Alternatives in Security

Token Scan — Meme coin and token security scan — checks for rug pull vectors (hidden mint, honeypot, fee manipulation, LP l 3.8k ★
Query Token Audit — Audit token security to detect scams, honeypots, and malicious contracts across BSC, Base, Solana, and Ethereu 483 ★
Reflexion — Audit and optimize the .claude/ ecosystem — skills, hooks, guides, patterns, agents, and settings — for qualit 224 ★