Claudemd Audit — Security skill for Claude Code
Aggregate claudemd rule-hits over the last N days.
How to install Claudemd Audit
Installs to ~/.claude/skills/sdsrss-claudemd-claudemd-audit/SKILL.md
mkdir -p ~/.claude/skills/sdsrss-claudemd-claudemd-audit && curl -fsSL https://raw.githubusercontent.com/sdsrss/claudemd/HEAD/commands/claudemd-audit.md -o ~/.claude/skills/sdsrss-claudemd-claudemd-audit/SKILL.md Restart Claude Code, or start a new session, for it to be picked up.
What Claudemd Audit does
name: claudemd-audit description: Aggregate claudemd rule-hits over the last N days. Shows top banned patterns, hook deny counts, per-spec-section heatmap, and bypass-escape-hatch usage.
Default window is 30 days. If the user passes a number (e.g. `/claudemd-audit 90`), set `CLAUDEMD_AUDIT_DAYS=$ARGS` before invocation.
Run: `CLAUDEMD_AUDIT_DAYS=${ARGS:-30} node ${CLAUDE_PLUGIN_ROOT}/scripts/audit.js`
The JSON contains:
| Field | Meaning |
|---|---|
byHook |
per-hook total + even |
Alternatives in Security
- Token Scan — Meme coin and token security scan — checks for rug pull vectors (hidden mint, honeypot, fee manipulation, LP l 3.8k ★
- Audit Agent Sessions — Analyze all agent sessions from the last 3 days across Claude, Codex, and Gemini 238 ★
- Audit Docs — Scan documentation for staleness — broken links, outdated counts, stale version references, and inconsistencie 95 ★
Full documentation available on GitHub
View Source RepositoryRelated Skills
Claudemd Rules
Audit the HARD-rules manifest. Cross-references spec/hard-rules.json with rule-hits.jsonl bySection data over
Claudemd Sampling Audit
Retrospective batch scan of historical transcripts for 8 self-enforced HARD rules — text detectors (§10-V bann
Copy Audit
Non-destructive copy QA gate. Flags rule breaks (opening, banned tics, rhythm, dashes, facts, modality, distin
Audit Report
Aggregate audit checkpoints into the final report — executive summary, Scope Coverage, findings by severity, m
GitOps
Flux CD and Argo CD — two modes. debug: five structured debug workflows for live clusters (installation, sourc
Notebook Audit
Verify [NB##:K##] claim references in prose against notebook sources. Args: [--aggregate= ] [--notebooks= ] -
Related Agents
Pattern Consolidator
Sleep-time memory compute. Reads daily notes + subagent logs from the last 7 days, identifies recurring patter
12 Lost Link Monitor
The backlinks lost in the last 90 days, ranked by the authority lost, and which are worth reclaiming.
Gsc Sitemaps
GSC sitemap manager. Reads sitemap inventory, error counts, and last-submitted timestamps; submits or deletes