sdsrss

Claudemd Rules — Security skill for Claude Code

Security community

Audit the HARD-rules manifest.

How to install Claudemd Rules

Installs to ~/.claude/skills/sdsrss-claudemd-claudemd-rules/SKILL.md

Terminal

mkdir -p ~/.claude/skills/sdsrss-claudemd-claudemd-rules && curl -fsSL https://raw.githubusercontent.com/sdsrss/claudemd/HEAD/commands/claudemd-rules.md -o ~/.claude/skills/sdsrss-claudemd-claudemd-rules/SKILL.md

Restart Claude Code, or start a new session, for it to be picked up.

What Claudemd Rules does

name: claudemd-rules description: Audit the HARD-rules manifest. Cross-references spec/hard-rules.json with rule-hits.jsonl bySection data over the last N days (default 30). Surfaces §13.1 demote candidates (hook-enforced rules with 0 hits in window) and stale-review entries.

Default window is 30 days (per OPERATOR.md §13.1; set in spec v6.11.15 as core §0.1 and moved to OPERATOR.md in v6.15.1 — lowered from 90d because the 90d gate was structurally unreachable under typical rule-hits l

Alternatives in Security

Maestro Knowledge — Intent-driven knowledge-store and Run knowledge lifecycle management — audit/prune, stage candidates (with sig 530 ★
Audit Agent Sessions — Analyze all agent sessions from the last 3 days across Claude, Codex, and Gemini 238 ★
Audit Verbs — Audit uip Verb References 166 ★