Audit Pipelines — Security skill for Claude Code
TDD-validated audit-grade decision pipelines - canonical encoding (RFC 8785 JCS), append-only decision logs, fingerprint chains, HMAC/Ed25519 signed exports, immutable storage, decision provenance, re.
How to install Audit Pipelines
Installs to ~/.claude/commands/tachyon-beep-skillpacks-audit-pipelines.md
mkdir -p ~/.claude/commands && curl -fsSL https://raw.githubusercontent.com/tachyon-beep/skillpacks/HEAD/.claude/commands/audit-pipelines.md -o ~/.claude/commands/tachyon-beep-skillpacks-audit-pipelines.md Restart Claude Code, or start a new session, for it to be picked up.
What Audit Pipelines does
description: TDD-validated audit-grade decision pipelines - canonical encoding (RFC 8785 JCS), append-only decision logs, fingerprint chains, HMAC/Ed25519 signed exports, immutable storage, decision provenance, retention reconciled with right-to-be-forgotten, partial replay
Audit Pipelines Routing
**Procedural decisions are first-class artifacts. Every decision has a verifiable provenance chain.**
Use the `using-audit-pipelines` skill from the `axiom-audit-pipelines` plugin to route
Alternatives in Security
- Migration Agent — Plans a token migration (format, tool, naming or tier): chains token-audit and naming-audit, builds the transf 194 ★
- Spec Audit — Spec-vs-code compliance audit — extracts requirements from a spec / whitepaper / RFC and matches each to the i 50 ★
- Aura — An audit trail for what AI agents changed in your codebase, and why — signed, per commit, at the symbol level 46 ★
Full documentation available on GitHub
View Source RepositoryRelated Skills
World Model MCP
world-model-mcp is a signed audit memory server for AI coding agents, delivered as an MCP tool. Every event Ed
Paymob Check Hmac
Audit a Paymob webhook HMAC verification implementation for correctness and safe failure behavior.
Claude Construction Takeoff Skill
Claude skill for construction quantity takeoffs. Counts elements, calculates concrete/formwork/reinforcement q
Zp Cve
Known-CVE check - version fingerprint to confirmed finding, backed by KEV and the local exploit corpora. Usage
Db8
Structured debate platform for multi-AI conversations — barrier synchronization, cryptographic provenance, and
Bastet Agent OS
Local-first control plane for AI-agent teams — orchestrates Claude Code, Codex, Grok, agy & Hermes into gated
Related Agents
Brain Keeper
Maintains Agentic SEO project authorial brain pages, append-only log, source provenance, and Obsidian-compatib
Observability Specialist
Observability specialist owning audit-log shape, telemetry surfaces, metrics emission, the SLSA provenance + s
Karr Ref Worker
App::karr Git/ref storage worker — Git::Native and CLI fallback, refs-backed BoardStore persistence, CAS, lock