Agent skill

Audit Feature Interaction

by ben-manes in ben-manes/caffeine

Analyze feature interaction pairs and triples for concurrent defects

Apache-2.0Auto-check passed

Install Audit Feature Interaction

skills CLI
$ npx skills add ben-manes/caffeine --skill audit-feature-interaction -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI
$ gh skill install ben-manes/caffeine audit-feature-interaction --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy
$ git clone --depth 1 https://github.com/ben-manes/caffeine.git skills-src && mkdir -p .claude/skills && cp -r skills-src/.claude/skills/audit-feature-interaction .claude/skills/audit-feature-interaction && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Facts

Skill name
audit-feature-interaction
GitHub stars
18k
Token cost
~524 tokens
SKILL.md length
240 words
Files
1
Skills in repo
33
Repo updated
First seen
Licence
Apache-2.0

At a glance

Analyze feature interaction pairs and triples for concurrent defects

  • Works in 4 steps: Refresh + expiration (D+B) — most-bugged… → Reference collection + any feature (C+*)… → Async completion + any feature (F+*) —… → …
  • Instructions only: no scripts, shell commands, URLs or credentials in SKILL.md

What it does

Audit Feature Interaction is an agent skill from ben-manes/caffeine. Analyze feature interaction pairs and triples for concurrent defects

Its SKILL.md is about 520 tokens, which your agent loads only when the skill is triggered. It is a single SKILL.md file with no bundled scripts.

The repository describes itself as: A high performance caching library for Java. The licence is Apache-2.0.

Example prompts

  • “/audit-feature-interaction”

Workflow steps

4 steps, taken from the first numbered list in SKILL.md.

  1. Refresh + expiration (D+B) — most-bugged interaction historically
  2. Reference collection + any feature (C+*) — value reference visibility
  3. Async completion + any feature (F+*) — future lifecycle edge cases
  4. Eviction + weight change (A+H) — counter drift during transitions

What it can do on your machine

Read from SKILL.md and the folder at commit e972fb0. It shows what the files ask for, not the result of running them.

  • Tool permissions

    Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.

    From allowed-tools in the SKILL.md frontmatter.

  • Runs code

    No scripts in the folder and no shell commands in SKILL.md.

    From the folder's file list and the shell code blocks in SKILL.md.

  • Network

    No URLs in SKILL.md.

    From URLs in SKILL.md, links to its own repository left out.

  • Credentials

    Names no API keys, tokens, secrets or passwords.

    From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

Audit Feature Interaction loads about 524 tokens when it runs. Until then it costs about 24 tokens; SKILL.md has 240 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it
~24
When it runs · the whole SKILL.md, loaded when a task matches
~524

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check passed

The automated check found no risky patterns in SKILL.md.

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.

SKILL.md

The full file from ben-manes/caffeine at commit e972fb0, republished under its Apache-2.0 licence (© ben-manes). 240 words, ~524 tokens.

Download SKILL.mdSave it as .claude/skills/audit-feature-interaction/SKILL.md (or your agent's skills folder).
name
audit-feature-interaction
description
Analyze feature interaction pairs and triples for concurrent defects
context
fork
agent
auditor
disable-model-invocation
true

Analyze the cache for defects arising from multiple features operating simultaneously on the same entry.

Assume at least one feature interaction bug exists. If your analysis yields zero findings, re-examine the top-priority pairs below — explain specifically why no interleaving produces a bug.

Priority ranking (from confirmed historical bugs):

  1. Refresh + expiration (D+B) — most-bugged interaction historically
  2. Reference collection + any feature (C+*) — value reference visibility
  3. Async completion + any feature (F+*) — future lifecycle edge cases
  4. Eviction + weight change (A+H) — counter drift during transitions

Features: A. Eviction (size/weight limit exceeded) B. Expiration (afterAccess, afterWrite, variable) C. Reference collection (weak key, weak value, soft value GC) D. Refresh (automatic reload) E. Loading (CacheLoader / computeIfAbsent) F. Async completion (CompletableFuture values) G. Listener notification (removal listener, eviction listener) H. Weight change (Weigher returning different weight for new value)

For each pair (A,B), (A,C), ..., (G,H) — 28 pairs total:

  1. Can both features trigger simultaneously on the same entry?
  2. If yes, construct the most adversarial interleaving.
  3. Trace step-by-step: correct processing? notifications? final state? cleanup?

After all pairs, identify highest-risk TRIPLE interactions:

  • Eviction + expiration + listener exception
  • Refresh + async completion + GC collection
  • Weight change + eviction + compute

High-risk pairwise combinations:

  • Eviction during refresh (entry evicted while refreshing)
  • Expiration during compute (entry expires mid-computation)
  • GC during async completion (future completes after weak ref collected)
  • Weight change during eviction
  • Listener exception during any other feature

For each defect: state the features involved, provide the interleaving, state the incorrect behavior.

© ben-manes, Apache-2.0. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file

Files

Just SKILL.md in .claude/skills/audit-feature-interaction of ben-manes/caffeine.

Open the folder on GitHubat commit e972fb0

Compare with similar skills

Audit Feature Interaction next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

Audit Feature Interaction compared with similar skills
SkillStarsUsed inTokensAuto-checkLicenceRepo updated
Audit Feature Interaction this skillben-manes/caffeine18k—~524Automated safety check: PassApache-2.0
Swift Concurrency 6 2affaan-m/ECC276k4 repos~2kAutomated safety check: PassMIT
Remotion Interactivityremotion-dev/remotion63k5 repos~4.8kAutomated safety check: PassCustom licence
Firecrawl Interact Integrationfirecrawl/firecrawl190k1 repos~731Automated safety check: PassISC
Swift Concurrency 6 2affaan-m/ECC276k3 repos~1.4kAutomated safety check: PassMIT
Pairingalsk1992/CloddsBot2.9k—~1.5kAutomated safety check: PassMIT

Similar skills

  • Swift 6.2 Approachable Concurrency — single-threaded by default, @concurrent for explicit background offloading, isolated conformances for main actor types.

    276k GitHub starsUsed in 4 repos~2k tokens
    DevelopmentAuto-check passed
  • Remotion Interactivity

    remotion-dev/remotion

    Official

    Structure Remotion markup for interactivity. An agent skill from remotion-dev/remotion.

    63k GitHub starsUsed in 5 repos~4.8k tokens
    Media & CreativeAuto-check passed
  • Guides adding Firecrawl's /interact endpoint to product code for pages that need clicks, forms, pagination or logged-in flows beyond plain scraping.

    190k GitHub starsUsed in 1 repo~731 tokens
    Data & AnalyticsAuto-check passed
  • Swift 6.2 可接近的并发性 — 默认单线程,@concurrent 用于显式后台卸载,隔离一致性用于主 actor 类型。

    276k GitHub starsUsed in 3 repos~1.4k tokens
    MobileAuto-check passed
  • Pairing

    alsk1992/CloddsBot

    User pairing, authentication, and trust management. An agent skill from alsk1992/CloddsBot.

    2.9k GitHub stars~1.5k tokensUpdated 6 days ago
    Backend & APIsAuto-check passed
  • Interaction To Next Paint

    thedaviddias/Front-End-Checklist

    A skill your agent uses when auditing slow page loads, heavy assets, or rendering delays related to Optimize interaction to next paint.

    74k GitHub stars~441 tokensUpdated 2 days ago
    Frontend & DesignAuto-check passed

More from ben-manes/caffeine

All 33 skills in this repo
  • Runs controlled JMH experiments on the Caffeine cache to find shared contention and hot-path waste, then reviews correctness and returns a reviewable patch.

    18k GitHub stars~2.6k tokensUpdated today
    Auto-check: notes
  • Git History Bug Audit

    ben-manes/caffeine

    Audits a module by walking its git history commit by commit, tracking unresolved issues forward, and reporting the ones that survive to HEAD as findings.

    18k GitHub stars~3.3k tokensUpdated today
    Auto-check passed
  • Adversarial Codebase Audit

    ben-manes/caffeine

    Runs a hostile review of the Caffeine Java caching library with parallel subagents that get no design docs, then challenges and consolidates their findings.

    18k GitHub stars~1.9k tokensUpdated today
    Auto-check: notes
  • Caffeine Performance Audit

    ben-manes/caffeine

    Audits the Caffeine cache source for hot-path costs such as allocations, contention and memory layout, reporting only findings tied to specific lines.

    18k GitHub stars~559 tokensUpdated today
    Auto-check passed
  • Audit Sibling Divergence

    ben-manes/caffeine

    Compares code paths that should behave the same, such as sync and async cache methods, and requires a concrete scenario where the two observably disagree.

    18k GitHub stars~4.3k tokensUpdated today
    Auto-check: notes
  • Climber Step Minimization

    ben-manes/caffeine

    Prices each step of the window climber algorithm by disabling it in turn, to find steps that no longer earn their keep and branches that no longer fire.

    18k GitHub stars~3k tokensUpdated today
    Auto-check: notes

Questions about Audit Feature Interaction

What does Audit Feature Interaction do?

Analyze feature interaction pairs and triples for concurrent defects. Audit Feature Interaction is an agent skill from ben-manes/caffeine.

How do I install Audit Feature Interaction in Claude Code?

Run `npx skills add ben-manes/caffeine --skill audit-feature-interaction -a claude-code`. Or copy the skill folder (.claude/skills/audit-feature-interaction in ben-manes/caffeine) into .claude/skills/audit-feature-interaction in your project. Claude Code loads it when a task matches its description.

How do I install Audit Feature Interaction in Codex?

Run `npx skills add ben-manes/caffeine --skill audit-feature-interaction -a codex`. Or copy the skill folder (.claude/skills/audit-feature-interaction in ben-manes/caffeine) into .agents/skills/audit-feature-interaction in your project. Codex loads it when a task matches its description.

Can I use Audit Feature Interaction in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add ben-manes/caffeine --skill audit-feature-interaction -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/audit-feature-interaction, .gemini/skills/audit-feature-interaction, .github/skills/audit-feature-interaction and .opencode/skills/audit-feature-interaction in your project.

What does Audit Feature Interaction need to run?

SKILL.md names no scripts, command-line tools or credentials: Audit Feature Interaction is instructions for the agent only.

Does Audit Feature Interaction access the network?

SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.

Is Audit Feature Interaction safe to install?

Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.

What licence does Audit Feature Interaction use?

Audit Feature Interaction is published under the Apache-2.0 licence (the repository's licence). It allows redistribution, so the full SKILL.md is shown on this page.

How many tokens does Audit Feature Interaction use?

About 524 tokens (SKILL.md is roughly 2.1k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.

What are the alternatives to Audit Feature Interaction?

Skills that share tags, products or a category with Audit Feature Interaction: Swift Concurrency 6 2 (affaan-m/ECC, 276k stars), Remotion Interactivity (remotion-dev/remotion, 63k stars), Firecrawl Interact Integration (firecrawl/firecrawl, 190k stars) and Swift Concurrency 6 2 (affaan-m/ECC, 276k stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains Audit Feature Interaction?

ben-manes (a GitHub user) maintains it in ben-manes/caffeine, which has 17,881 GitHub stars. The repository holds 33 skills in this directory. The repository was last updated on October 9, 2026.

Source: ben-manes/caffeine on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.