Agent skill

Audit Integrity

by boshi-xixixi in boshi-xixixi/TraeSkill

Shared audit integrity framework for all AppSec agents — enforces output quality, intellectual honesty, and continuous improvement through anti-rationalization guards, self-critique loops, retry…

MITAuto-check passedTesting & QA

Install Audit Integrity

skills CLI

$ npx skills add boshi-xixixi/TraeSkill --skill audit-integrity -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI

$ gh skill install boshi-xixixi/TraeSkill audit-integrity --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy

$ git clone --depth 1 https://github.com/boshi-xixixi/TraeSkill.git skills-src && mkdir -p .claude/skills && cp -r skills-src/.trae/Skills/.agents/skills/audit-integrity .claude/skills/audit-integrity && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Paste into Claude Code

Install the "audit-integrity" agent skill from https://github.com/boshi-xixixi/TraeSkill/tree/main/.trae/Skills/.agents/skills/audit-integrity into .claude/skills/audit-integrity/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "audit-integrity", then confirm the skill loads.

Claude Code copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.

$skill-installer

$skill-installer install https://github.com/boshi-xixixi/TraeSkill/tree/main/.trae/Skills/.agents/skills/audit-integrity

Type this inside Codex. $skill-installer <name> installs a curated skill from openai/skills. The installer writes to $CODEX_HOME/skills (default ~/.codex/skills). Restart Codex if the skill does not show up.

skills CLI

$ npx skills add boshi-xixixi/TraeSkill --skill audit-integrity -a codex

Project install goes to .agents/skills/; add -g for ~/.codex/skills/.

GitHub CLI

$ gh skill install boshi-xixixi/TraeSkill audit-integrity --agent codex

Project scope by default (.agents/skills/); add --scope user for a personal install.

Manual copy

$ git clone --depth 1 https://github.com/boshi-xixixi/TraeSkill.git skills-src && mkdir -p .agents/skills && cp -r skills-src/.trae/Skills/.agents/skills/audit-integrity .agents/skills/audit-integrity && rm -rf skills-src

Use ~/.agents/skills/ instead of .agents/skills for a personal install.

Codex skills documentation · loads skills from .agents/skills/

Paste into Codex

Install the "audit-integrity" agent skill from https://github.com/boshi-xixixi/TraeSkill/tree/main/.trae/Skills/.agents/skills/audit-integrity into .agents/skills/audit-integrity/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "audit-integrity", then confirm the skill loads.

Codex copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.

skills CLI

$ npx skills add boshi-xixixi/TraeSkill --skill audit-integrity -a cursor

Project install goes to .agents/skills/; add -g for ~/.cursor/skills/.

GitHub CLI

$ gh skill install boshi-xixixi/TraeSkill audit-integrity --agent cursor

Project scope by default (.agents/skills/); add --scope user for a personal install.

Manual copy

$ git clone --depth 1 https://github.com/boshi-xixixi/TraeSkill.git skills-src && mkdir -p .cursor/skills && cp -r skills-src/.trae/Skills/.agents/skills/audit-integrity .cursor/skills/audit-integrity && rm -rf skills-src

Use ~/.cursor/skills/ instead of .cursor/skills for a personal install.

Cursor skills documentation · loads skills from .cursor/skills/, .agents/skills/, .claude/skills/, .codex/skills/

Paste into Cursor

Install the "audit-integrity" agent skill from https://github.com/boshi-xixixi/TraeSkill/tree/main/.trae/Skills/.agents/skills/audit-integrity into .cursor/skills/audit-integrity/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "audit-integrity", then confirm the skill loads.

Cursor copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.

gemini skills install

$ gemini skills install https://github.com/boshi-xixixi/TraeSkill.git --path .trae/Skills/.agents/skills/audit-integrity

--scope user (default) or --scope workspace; --path is the subfolder of the repo that holds the skill; --consent skips the security confirmation prompt.

skills CLI

$ npx skills add boshi-xixixi/TraeSkill --skill audit-integrity -a gemini-cli

Project install goes to .agents/skills/; add -g for ~/.gemini/skills/.

GitHub CLI

$ gh skill install boshi-xixixi/TraeSkill audit-integrity --agent gemini-cli

Project scope by default (.agents/skills/); add --scope user for a personal install.

Manual copy

$ git clone --depth 1 https://github.com/boshi-xixixi/TraeSkill.git skills-src && mkdir -p .gemini/skills && cp -r skills-src/.trae/Skills/.agents/skills/audit-integrity .gemini/skills/audit-integrity && rm -rf skills-src

Use ~/.gemini/skills/ instead of .gemini/skills for a personal install, then run /skills reload.

Gemini CLI skills documentation · loads skills from .gemini/skills/, .agents/skills/

Paste into Gemini CLI

Install the "audit-integrity" agent skill from https://github.com/boshi-xixixi/TraeSkill/tree/main/.trae/Skills/.agents/skills/audit-integrity into .gemini/skills/audit-integrity/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "audit-integrity", then confirm the skill loads.

Gemini CLI copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.

GitHub CLI

$ gh skill install boshi-xixixi/TraeSkill audit-integrity

Installs for Copilot at project scope by default; add --scope user for a personal install. Preview a skill first with gh skill preview. Needs GitHub CLI 2.90.0 or later (public preview).

skills CLI

$ npx skills add boshi-xixixi/TraeSkill --skill audit-integrity -a github-copilot

Project install goes to .agents/skills/; add -g for ~/.copilot/skills/.

Manual copy

$ git clone --depth 1 https://github.com/boshi-xixixi/TraeSkill.git skills-src && mkdir -p .github/skills && cp -r skills-src/.trae/Skills/.agents/skills/audit-integrity .github/skills/audit-integrity && rm -rf skills-src

Use ~/.copilot/skills/ instead of .github/skills for a personal install. Commit .github/skills so cloud agent and code review can use it.

GitHub Copilot skills documentation · loads skills from .github/skills/, .claude/skills/, .agents/skills/

Paste into GitHub Copilot

Install the "audit-integrity" agent skill from https://github.com/boshi-xixixi/TraeSkill/tree/main/.trae/Skills/.agents/skills/audit-integrity into .github/skills/audit-integrity/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "audit-integrity", then confirm the skill loads.

GitHub Copilot copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.

skills CLI

$ npx skills add boshi-xixixi/TraeSkill --skill audit-integrity -a opencode

OpenCode documents no install command of its own. Project install goes to .agents/skills/; add -g for ~/.config/opencode/skills/.

GitHub CLI

$ gh skill install boshi-xixixi/TraeSkill audit-integrity --agent opencode

Project scope by default (.agents/skills/); add --scope user for a personal install.

Manual copy

$ git clone --depth 1 https://github.com/boshi-xixixi/TraeSkill.git skills-src && mkdir -p .opencode/skills && cp -r skills-src/.trae/Skills/.agents/skills/audit-integrity .opencode/skills/audit-integrity && rm -rf skills-src

Use ~/.config/opencode/skills/ instead of .opencode/skills for a personal install.

OpenCode skills documentation · loads skills from .opencode/skills/, .claude/skills/, .agents/skills/

Paste into OpenCode

Install the "audit-integrity" agent skill from https://github.com/boshi-xixixi/TraeSkill/tree/main/.trae/Skills/.agents/skills/audit-integrity into .opencode/skills/audit-integrity/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "audit-integrity", then confirm the skill loads.

OpenCode copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.

Facts

Skill name: audit-integrity
GitHub stars: 276
Token cost: ~832 tokens
SKILL.md length: 290 words
Files: 8 (incl. references)
Skills in repo: 16
Repo updated: May 12, 2026
First seen: Oct 7, 2026
Licence: MIT

At a glance

Shared audit integrity framework for all AppSec agents — enforces output quality, intellectual honesty, and continuous improvement through anti-rationalization guards, self-critique loops, retry…

Works in 6 steps: Before analysis: Apply Clarification… → During analysis: Apply… → After initial pass: Execute… → …
Tasks that involve Quality gates
SKILL.md covers When to Use, Components, Execution Flow and Agent-Specific Adaptation
Instructions only: no scripts, shell commands, URLs or credentials in SKILL.md

What it does

Audit Integrity is an agent skill from boshi-xixixi/TraeSkill. Shared audit integrity framework for all AppSec agents — enforces output quality, intellectual honesty, and continuous improvement through anti-rationalization guards, self-critique loops, retry protocols, non-negotiable behaviors, self-reflection quality gates (1-10 scoring, ≥8 threshold), and a self-learning system with lesson/memory governance for security analysis agents.

Its SKILL.md is about 830 tokens, which your agent loads only when the skill is triggered. The skill folder holds 8 other files, including reference files (for example `references/anti-rationalization-guard.md`, `references/clarification-protocol.md` and `references/non-negotiable-behaviors.md`). Compatibility notes: Cross-platform. Works with any language or framework analyzed by AppSec agents.

It sits in Testing & QA, covering Quality gates and Journaling and reflection. The repository describes itself as: 为 Trae IDE 打造的全流程标准化 AI 开发技能库，内置调度分发与多角色研发技能，一键导入规范 AI 编码工作流 🚀. The licence is MIT.

When your agent uses it

Tasks that involve Quality gates
Tasks that involve Journaling and reflection

Example prompts

“/audit-integrity”

Requirements

Compatibility (from SKILL.md): Cross-platform. Works with any language or framework analyzed by AppSec agents.

Workflow steps

6 steps, taken from the first numbered list in SKILL.md.

Before analysis: Apply Clarification Protocol if scope is ambiguous
During analysis: Apply Anti-Rationalization Guard at every decision point
After initial pass: Execute Self-Critique Loop (mandatory second pass)
On tool failure: Apply Retry Protocol
Before delivery: Run Self-Reflection Quality Gate (all categories must score ≥8)
After delivery: Create Lessons/Memories for novel findings, false positives, or methodology gaps (see Self-Learning System)

What it can do on your machine

Read from SKILL.md and the folder at commit 9cf38e6. It shows what the files ask for, not the result of running them.

Tool permissions
Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.
From allowed-tools in the SKILL.md frontmatter.
Runs code
No scripts in the folder and no shell commands in SKILL.md.
From the folder's file list and the shell code blocks in SKILL.md.
Network
No URLs in SKILL.md.
From URLs in SKILL.md, links to its own repository left out.
Credentials
Names no API keys, tokens, secrets or passwords.
From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.
Compatibility
Cross-platform. Works with any language or framework analyzed by AppSec agents.
From compatibility in the SKILL.md frontmatter.

Context cost

Audit Integrity loads about 832 tokens when it runs, and up to ~4.4k if it reads all its reference files. Until then it costs about 99 tokens; SKILL.md has 290 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it: ~99
When it runs · the whole SKILL.md, loaded when a task matches: ~832
With references · SKILL.md plus every file in references/, read only if the agent opens them: ~4.4k

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check passed

The automated check found no risky patterns in SKILL.md.

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.

SKILL.md

The full file from boshi-xixixi/TraeSkill at commit 9cf38e6, republished under its MIT licence (© boshi-xixixi). 290 words, ~832 tokens.

Download SKILL.mdSave it as .claude/skills/audit-integrity/SKILL.md (or your agent's skills folder). This skill also uses 7 other files; get the full folder from GitHub.

name: audit-integrity
description: Shared audit integrity framework for all AppSec agents — enforces output quality, intellectual honesty, and continuous improvement through anti-rationalization guards, self-critique loops, retry protocols, non-negotiable behaviors, self-reflection quality gates (1-10 scoring, ≥8 threshold), and a self-learning system with lesson/memory governance for security analysis agents.
compatibility: Cross-platform. Works with any language or framework analyzed by AppSec agents.
metadata.version: 1.0

Audit Integrity Skill

Enforces output quality, intellectual honesty, and continuous improvement across all AppSec agents.

When to Use

Every security analysis, code review, threat model, or quality scan agent run
Applied automatically as a post-analysis quality gate
Applicable to any agent performing SAST, SCA, threat modeling, or code quality analysis

Components

This skill provides 7 reusable capabilities. Agents apply all 7 unless their scope excludes a specific component.

Component	Reference File	Purpose
Clarification Protocol	clarification-protocol.md	Ask ≤2 targeted questions before analysis when scope is ambiguous
Anti-Rationalization Guard	anti-rationalization-guard.md	Table of prohibited rationalizations with mandatory responses
Self-Critique Loop	self-critique-loop.md	Mandatory second-pass review after initial analysis
Retry Protocol	retry-protocol.md	Tool failure handling — retry once, then document
Non-Negotiable Behaviors	non-negotiable-behaviors.md	Hard rules: never fabricate, always cite evidence, report gaps
Self-Reflection Quality Gate	self-reflection-quality-gate.md	1–10 scoring rubric with ≥8 threshold per category
Self-Learning System	self-learning-system.md	Lesson/Memory templates and governance rules

Execution Flow

Before analysis: Apply Clarification Protocol if scope is ambiguous
During analysis: Apply Anti-Rationalization Guard at every decision point
After initial pass: Execute Self-Critique Loop (mandatory second pass)
On tool failure: Apply Retry Protocol
Before delivery: Run Self-Reflection Quality Gate (all categories must score ≥8)
After delivery: Create Lessons/Memories for novel findings, false positives, or methodology gaps (see Self-Learning System)

Agent-Specific Adaptation

Each agent customizes the Self-Critique Loop checklist and Self-Reflection Quality Gate categories to match its domain. The reference files provide the base templates; agents extend them with domain-specific items.

Example extensions per agent type

SAST/SCA agents: Add taint trace completeness and manifest coverage checks
SonarQube-style agents: Add rating sanity check (A–E consistency with findings)
Threat modeling agents: Add STRIDE category completeness per trust boundary
Code review agents: Add trust boundary audit with data flow tracing

Files

SKILL.md and 7 other files (references) in .trae/Skills/.agents/skills/audit-integrity of boshi-xixixi/TraeSkill.

SKILL.md
references/anti-rationalization-guard.md
references/clarification-protocol.md
references/non-negotiable-behaviors.md
references/retry-protocol.md
references/self-critique-loop.md
references/self-learning-system.md
references/self-reflection-quality-gate.md

Open the folder on GitHubat commit 9cf38e6

Compare with similar skills

Audit Integrity next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

Audit Integrity compared with similar skills
Skill	Stars	Used in	Tokens	Auto-check	Licence	Repo updated
Audit Integrity this skillboshi-xixixi/TraeSkill	276	—	~832	Automated safety check: Pass	MIT	5 mo ago
Feature Plannerserendipity1004/cc-feature-implementer	176	—	~2.4k	Automated safety check: Pass	None	9 mo ago
Early Experience DataOSU-NLP-Group/EarlyExperience	103	—	~4.1k	Automated safety check: Pass	MIT	3 mo ago
Ccg Workflowfengshao1227/ccg-workflow	5.9k	—	~2.3k	Automated safety check: Pass	MIT	24 days ago
Conducty Checkpointrobertbarclayy/conducty	176	—	~1.5k	Automated safety check: Pass	MIT	3 mo ago
Mission Plannerjdforsythe/forge	151	—	~3.5k	Automated safety check: Pass	MIT	3 mo ago

Similar skills

Feature Planner
serendipity1004/cc-feature-implementer
Creates phase-based feature plans with quality gates and incremental delivery structure.
176 GitHub stars~2.4k tokensUpdated 9 mo ago
Testing & QAAuto-check passed
Early Experience Data
OSU-NLP-Group/EarlyExperience
A skill your agent uses whenever the user asks to generate, collect, inspect, or prepare early-experience training data (Implicit World Modeling or Self-Reflection, in the sense of arXiv:2510.08558)…
103 GitHub stars~4.1k tokensUpdated 3 mo ago
Testing & QAAuto-check passed
Ccg Workflow
fengshao1227/ccg-workflow
How to run a non-trivial change end to end with the CCG role tools (ccganalyze / ccgdesign / ccgbuild / ccgdebug / ccgoptimize / ccgreview / ccgtest) and the verify- quality gates.
5.9k GitHub stars~2.3k tokensUpdated 24 days ago
Testing & QAAuto-check passed
Conducty Checkpoint
robertbarclayy/conducty
Quality gate between parallelization groups. An agent skill from robertbarclayy/conducty.
176 GitHub stars~1.5k tokensUpdated 3 mo ago
Testing & QAAuto-check passed
Mission Planner
jdforsythe/forge
Decomposes goals into team blueprints using evidence-based scaling laws, topology selection, and role design.
151 GitHub stars~3.5k tokensUpdated 3 mo ago
Testing & QAAuto-check passed
Quality Gate
0xNyk/lacp
Production quality gate for agent sessions. An agent skill from 0xNyk/lacp.
305 GitHub stars~382 tokensUpdated 18 days ago
Testing & QAAuto-check passed

Questions about Audit Integrity

What does Audit Integrity do?

Shared audit integrity framework for all AppSec agents — enforces output quality, intellectual honesty, and continuous improvement through anti-rationalization guards, self-critique loops, retry…. Audit Integrity is an agent skill from boshi-xixixi/TraeSkill. Shared audit integrity framework for all AppSec agents — enforces output quality, intellectual honesty, and continuous improvement through anti-rationalization guards, self-critique loops, retry protocols, non-negotiable behaviors, self-reflection quality gates (1-10 scoring, ≥8 threshold), and a self-learning system with lesson/memory governance for security analysis agents.

When should I use Audit Integrity?

Audit Integrity fits situations like: tasks that involve Quality gates; tasks that involve Journaling and reflection.

How do I install Audit Integrity in Claude Code?

Run `npx skills add boshi-xixixi/TraeSkill --skill audit-integrity -a claude-code`. Or copy the skill folder (.trae/Skills/.agents/skills/audit-integrity in boshi-xixixi/TraeSkill) into .claude/skills/audit-integrity in your project. Claude Code loads it when a task matches its description.

How do I install Audit Integrity in Codex?

Run `npx skills add boshi-xixixi/TraeSkill --skill audit-integrity -a codex`. Or copy the skill folder (.trae/Skills/.agents/skills/audit-integrity in boshi-xixixi/TraeSkill) into .agents/skills/audit-integrity in your project. Codex loads it when a task matches its description.

Can I use Audit Integrity in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add boshi-xixixi/TraeSkill --skill audit-integrity -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/audit-integrity, .gemini/skills/audit-integrity, .github/skills/audit-integrity and .opencode/skills/audit-integrity in your project.

What does Audit Integrity need to run?

SKILL.md names no scripts, command-line tools or credentials: Audit Integrity is instructions for the agent only. Compatibility (from SKILL.md): Cross-platform. Works with any language or framework analyzed by AppSec agents..

Does Audit Integrity access the network?

SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.

Is Audit Integrity safe to install?

Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.

What licence does Audit Integrity use?

Audit Integrity is published under the MIT licence (the repository's licence). It allows redistribution, so the full SKILL.md is shown on this page.

How many tokens does Audit Integrity use?

About 832 tokens (SKILL.md is roughly 3.3k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full. Its references folder adds about 3.6k tokens, read only when the agent opens those files.

What are the alternatives to Audit Integrity?

Skills that share tags, products or a category with Audit Integrity: Feature Planner (serendipity1004/cc-feature-implementer, 176 stars), Early Experience Data (OSU-NLP-Group/EarlyExperience, 103 stars), Ccg Workflow (fengshao1227/ccg-workflow, 5.9k stars) and Conducty Checkpoint (robertbarclayy/conducty, 176 stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains Audit Integrity?

boshi-xixixi (a GitHub user) maintains it in boshi-xixixi/TraeSkill, which has 276 GitHub stars. The repository holds 16 skills in this directory. The repository was last updated on May 12, 2026.

Source: boshi-xixixi/TraeSkill on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.

Install Audit Integrity

Facts

At a glance

What it does

When your agent uses it

Example prompts

Requirements

Workflow steps

What it can do on your machine

Tool permissions

Runs code

Network

Credentials

Compatibility

Context cost

Safety

SKILL.md

Audit Integrity Skill

When to Use

Components

Execution Flow

Agent-Specific Adaptation

Example extensions per agent type

Files

Compare with similar skills

Similar skills

More from boshi-xixixi/TraeSkill

Related

Questions about Audit Integrity