agentic-audit

Audit agentic instruction files and Claude Code settings against an opinionated baseline.

3|5|Updated Apr 26, 2026
One-click install
npx skills add https://github.com/BenSheridanEdwards/ArchitectPlaybook --skill agentic-audit-bensheridanedwards
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: agentic-audit
Source: https://github.com/BenSheridanEdwards/ArchitectPlaybook/tree/main/agentic-audit
Command: npx skills add https://github.com/BenSheridanEdwards/ArchitectPlaybook --skill agentic-audit-bensheridanedwards

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? AI coding agents rely on instruction files like CLAUDE.md, AGENTS.md, and .cursorrules, plus Claude Code settings, but these files drift, conflict, leak secrets, or go stale. This Skill audits them against an opinionated baseline so agents get the context they need and settings stay safe. ## Core Features & Use Cases - Four-layer audit: Checks project context coverage, operational guidance and conventions, Claude Code settings hygiene (permissions, secrets, hooks, MCP servers), and multi-agent consistency and drift. - Diagnostic snapshot: Inventories every detected agentic instruction file with line counts, last-modified dates, and tool family, plus settings.json shape and hook counts. - Static and read-only: Never writes to the codebase, runs commands, or makes network requests; optionally generates a descriptive implementation plan after findings. - Use Case: A team adopting Claude Code, Cursor, and Copilot simultaneously runs the audit to discover that CLAUDE.md and .cursorrules give conflicting commit conventions, settings.json contains a broad Bash(*) permission, and documented commands reference scripts that no longer exist in package.json. ## Quick Start Run /agentic-audit in the project root to audit the agentic instruction files and Claude Code settings, then review the findings report written to .architect-audits/agentic-audit/findings.md.

Frequently Asked Questions about agentic-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit CLAUDE.md and other agentic instruction files?

Run /agentic-audit from the project root. It detects CLAUDE.md, AGENTS.md, .cursorrules, .cursor/rules/*.mdc, copilot-instructions.md, and similar files, then grades them across four layers and writes findings to .architect-audits/agentic-audit/.

What does the agentic audit check in Claude Code settings.json?

It validates JSON syntax, confirms settings.local.json is gitignored, pattern-matches for secrets, flags over-broad permission patterns like Bash(*), verifies hooks reference existing scripts, and checks env blocks and MCP server entries for concrete secrets.

Does the agentic audit modify my project files?

No. The audit is fully static and read-only; it never writes to the codebase, runs project commands, or makes network requests. It only writes its own reports under .architect-audits/agentic-audit/ and offers an optional descriptive implementation plan.

How is agentic-audit different from documentation-audit?

documentation-audit covers documentation written for humans, such as READMEs and architecture docs. agentic-audit covers documentation and configuration written for AI coding agents, including instruction-file content, settings hygiene, and multi-agent drift.

Can I adjust the audit thresholds for instruction file length?

Yes. Use flags like --threshold-instruction-min-lines (default 25), --threshold-instruction-max-lines (default 400), --threshold-permission-broadness (default 5), and --threshold-context-coverage (default 60) to tune the baseline.

What happens when no .claude/settings.json exists?

Every Layer 3 settings check is emitted explicitly as not-applicable with a null status and reason claude-settings-not-adopted. The audit does not treat the missing file as a violation, since not every project uses Claude Code locally.