Agent skill

Audit Requirements

by devcodex-labs in devcodex-labs/devcodex

需求文档审查维度 RQ-1~RQ-8 — 需求定义/功能描述/产品事实源与可派生验证边界专属审查层. An agent skill from devcodex-labs/devcodex.

AGPL-3.0Auto-check passedDevelopment

Install Audit Requirements

skills CLI
$ npx skills add devcodex-labs/devcodex --skill audit-requirements -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI
$ gh skill install devcodex-labs/devcodex audit-requirements --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy
$ git clone --depth 1 https://github.com/devcodex-labs/devcodex.git skills-src && mkdir -p .claude/skills && cp -r skills-src/content/skills/audit-requirements .claude/skills/audit-requirements && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Facts

Skill name
audit-requirements
GitHub stars
439
Token cost
~1.7k tokens
SKILL.md length
418 words
Files
2
Skills in repo
70
Repo updated
First seen
Licence
AGPL-3.0

At a glance

需求文档审查维度 RQ-1~RQ-8 — 需求定义/功能描述/产品事实源与可派生验证边界专属审查层. An agent skill from devcodex-labs/devcodex.

  • Development work in your project
  • SKILL.md covers 适用范围, 维度总览(RQ-1~RQ-8), 核心检查维度 and N/A 规则
  • Instructions only: no scripts, shell commands, URLs or credentials in SKILL.md

What it does

Audit Requirements is an agent skill from devcodex-labs/devcodex. 需求文档审查维度 RQ-1~RQ-8 — 需求定义/功能描述/产品事实源与可派生验证边界专属审查层

Its SKILL.md is about 1.7k tokens, which your agent loads only when the skill is triggered. The skill folder holds 1 other file (for example `intent.json`).

It sits in Development. The repository describes itself as: Intent-driven AI coding workflow runtime for consistent context, skills, approvals, validation, and handoffs across six AI coding hosts. The licence is AGPL-3.0.

When your agent uses it

  • Development work in your project

Example prompts

  • “/audit-requirements”

What it can do on your machine

Read from SKILL.md and the folder at commit 1dd4525. It shows what the files ask for, not the result of running them.

  • Tool permissions

    Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.

    From allowed-tools in the SKILL.md frontmatter.

  • Runs code

    No scripts in the folder and no shell commands in SKILL.md.

    From the folder's file list and the shell code blocks in SKILL.md.

  • Network

    No URLs in SKILL.md.

    From URLs in SKILL.md, links to its own repository left out.

  • Credentials

    Names no API keys, tokens, secrets or passwords.

    From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

Audit Requirements loads about 1.7k tokens when it runs. Until then it costs about 17 tokens; SKILL.md has 418 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it
~17
When it runs · the whole SKILL.md, loaded when a task matches
~1.7k

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check passed

The automated check found no risky patterns in SKILL.md.

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.

SKILL.md

The full file from devcodex-labs/devcodex at commit 1dd4525, republished under its AGPL-3.0 licence (© devcodex-labs). 418 words, ~1,748 tokens.

Download SKILL.mdSave it as .claude/skills/audit-requirements/SKILL.md (or your agent's skills folder). This skill also uses 1 other file; get the full folder from GitHub.
name
audit-requirements
description
需求文档审查维度 RQ-1~RQ-8 — 需求定义/功能描述/产品事实源与可派生验证边界专属审查层

Audit Requirements Skill

适用范围

审查目标为需求文档(需求方输入、产品完整需求、需求变更、产品确认、功能需求、技术验收文档)时,叠加本 Skill(在 G1~G5 之后)。若目标是需求方输入型文档,只要求原始诉求清楚、来源可追溯和不确定点可识别;若目标是产品输入型需求,产品不需要填写验收标准;审查重点是双方确认后的产品事实源是否足以让研发 / AI 在技术方案、实施计划和测试方案中派生实现验收与验证清单。入口类型不得混写:纯新需求输入落 00-需求概况.md;有产品角色直接提供完整需求落 01-产品需求.md,产品模板正文只给产品填写完整 PRD,AI / 研发缺口 / 冲突检查记录在 CP1 摘要、02-技术方案.md 或报告中,不生成或重写产品需求;需求变更输入落 00-需求变更概况.md 并锚定原需求基线;AI 生成的产品确认落 01-需求确认.md / 01-需求变更确认.md(历史 01-需求概述.md 仅作兼容);Bug 问题应转 fix 的 bugs/<问题>/00-问题概况.md / 01-问题确认.md,不按产品需求审查。

维度总览(RQ-1~RQ-8)

分组维度优先级
A — 需求质量RQ-1 需求完整性 · RQ-2 需求明确性 · RQ-3 需求可验证性🔴
B — 一致性与追溯RQ-4 需求一致性 · RQ-7 版本与变更追溯🔴/💡
C — 影响与约束RQ-5 影响分析完整性 · RQ-6 约束条件明确性🟡
D — 项目上下文RQ-8 项目上下文一致性🟡

核心检查维度

RQ-1 需求完整性 🔴

  • 必含章节:背景/问题描述、目标、功能需求或业务规则、非功能业务约束、范围/排除范围、示例/反例/异常或待确认问题
  • 需求链路应先区分入口类型:无产品角色的纯新需求 00-需求概况.md(需求方轻量原始诉求)→ 01-需求确认.md(AI 生成产品需求草稿,产品补充归一化)→ 需求方 + 产品双方确认 → 技术方案;有产品角色的产品完整需求 01-产品需求.md(产品直接提供完整 PRD,包含流程、交互、字段描述和规则)→ AI / 研发缺口 / 冲突检查(记录在 CP1 摘要、02-技术方案.md 或报告中,不写入产品模板正文)→ 技术方案;需求变更 00-需求变更概况.md → 01-需求变更确认.md → 回写目标需求真相源 → 技术方案;Bug 问题转 fix,不进入产品需求模板
  • 需求方输入型文档不要求 Mermaid、完整交互、字段全量规则或验收标准;但必须保留背景、痛点、期望结果、场景、样例、附件和不确定点
  • RequesterTemplatePlainLanguageGate:面向用户、运营、老板、客户、内部使用方等非产品 / 非研发填写者的输入模板,字段必须用口语化问题表达,并解释“这项填什么、可以怎么写、可以不填的情况、不要写什么”;抽象术语如期望结果、当前处理方式、已知规则与限制、示例 / 反例必须转成“你希望系统帮你做到什么、现在你们怎么凑合处理、有哪些必须遵守的业务口径、给一个希望出现的例子、给一个不能接受的例子、有哪些截图表格链接或聊天记录”
  • 产品输入型需求不要求产品填写验收标准;实现验收应由技术方案 / 实施计划 / 测试方案从双方确认后的产品事实源或产品直接提供的完整需求派生
  • 条件必含:业务流程(除纯静态文案、纯说明补充一类无需行为流转的改动外,建议使用 Mermaid 主流程图 + 文字步骤图 + 节点解释;确无流程时标 N/A 并说明原因)
  • 功能需求有唯一编号(如 F-01、A-01)
  • 每个需求有优先级标注
  • 有排除范围(明确不做什么)
  • 页面 / 组件 / 可视化 / 用户可见交互类需求必须描述前端交互流程、状态覆盖、反馈方式、输入方式和设计来源
  • 涉及字段时只要求字段描述、业务含义、来源、展示、编辑规则和备注,不要求数据库字段、接口 Schema 或内部 ID

RQ-2 需求明确性 🔴

  • 需求描述无歧义,可直接转化为实现
  • 非功能业务约束写清用户感知、业务边界或运营约束;技术量化指标可由技术方案补充

RQ-3 需求可验证性 🔴

  • 每个需求有清楚的入口类型、需求方原始输入锚点(00-需求概况.md / 00-需求变更概况.md / 01-产品需求.md 或等价附件)、AI 提炼口径或产品原文锚点、产品事实源(01-需求确认.md / 01-产品需求.md / 01-需求变更确认.md 或兼容真相源)、期望业务结果或可观察用户反馈,可被技术方案派生为验证项
  • 需求应包含足够的正例、反例、边界例、异常与回退口径;缺失项应进入待确认问题
  • 技术验收 / 测试方案类文档才要求可执行验证用例、正向/负向场景和通过标准

RQ-4 需求一致性 🔴

  • 同一需求包内编号、术语、范围、优先级与阶段声明不得互相矛盾;同名功能不得给出相反行为
  • 变更需求必须锚定原需求基线(路径/版本/章节),并显式列出 retained / changed / removed / deferred
  • 正例:变更确认稿可追溯到原 F-01,且“不做什么”与正文功能列表无冲突
  • 反例:同一 F-id 在概况写“必须登录”、在确认写“匿名可用”且无裁决记录 → 阻断
  • 必要证据:冲突对(摘录 A/B)、裁决位置(确认稿/报告)、未决冲突清单(可为空)
  • 验证路线:交叉阅读 00/01 + 功能清单 + 排除范围;无冲突则写 RQ-4=PASS,有未决冲突则 FAIL 并禁止进入 CP2 编码

RQ-5 影响分析完整性 🟡

  • 当需求触及外部系统、共享契约、多模块、数据迁移、权限边界或发布面时,必须说明影响面与回滚/降级口径;纯文案/单页说明可标 N/A + skipReason
  • 影响面至少覆盖:直接消费者、间接调用链/数据依赖、破坏性兼容风险、需同步的 Profile/文档/配置(若适用)
  • 正例:新增公开 API 列出 SDK/网站/旧客户端三类消费者与兼容策略
  • 反例:引入跨服务写路径却只写“影响后端”且无消费者与回滚 → FAIL
  • 必要证据:ImpactSurface 列表(或 N/A 理由)、兼容/回滚一句、关联模块路径
  • 验证路线:对照变更类型检查是否触发外部依赖/共享契约;无外部依赖时 RQ-5=N/A

RQ-6 约束条件明确性 🟡

  • 业务、合规、性能、安全、环境与时间窗口等约束须可观察、可判定,禁止仅写“尽量快/安全/兼容”
  • 约束写清:主体(谁遵守)、条件(何时生效)、边界(上限/下限/禁止项)、例外(若有)
  • 正例:“管理端导出单次 ≤ 1 万行;超限返回 400 与可操作提示”
  • 反例:“系统应高性能”且无指标/场景/失败表现 → FAIL 或降为待确认
  • 必要证据:约束条目表(主体/条件/边界/例外)或明确“无额外约束”
  • 验证路线:扫描非功能/约束章节;技术量化指标可下沉 CP2,但业务边界须在需求层可判定

RQ-7 版本与变更追溯 💡/🔴

  • 有版本号、修订日期或变更记录时,当前有效需求必须可指向唯一 current 真相源;历史版本须标记 historical/superseded
  • 需求变更路径:概况 → 确认 → 回写目标需求真相源;缺失回写锚点时不得宣称“已同步主需求”
  • 正例:01-需求确认.md 文首 version/status/supersedes,旧稿 status=superseded
  • 反例:多份 active 确认稿并行、无 supersedes → 阻断(🔴);仅缺 changelog 小节但 current 唯一 → 💡 改进
  • 必要证据:current 路径、version/status、supersedes 链(可空)、变更回写位置
  • 验证路线:列任务目录全部需求稿 status;current 计数必须 = 1

RQ-8 项目上下文一致性 🟡

  • 需求中的技术栈、目录边界、脚本、环境、发布面与 active Profile / 仓库现实一致;不一致须标注假设或待确认,不得静默当作事实
  • 无项目 Profile 时 RQ-8=N/A;有 Profile 时至少核对 01 项目信息中的栈/阶段/关键路径是否与需求假设冲突
  • 正例:需求声明 Node 20 + monorepo 包名与 Profile 01 一致
  • 反例:需求写“必须改 Django 中间件”而 Profile/仓库为纯 Node CLI → FAIL 或待确认
  • 必要证据:Profile 对照表(字段/需求声明/一致或差异)、差异处置(改需求/改 Profile/待确认)
  • 验证路线:定向读取 active Profile 与需求假设句;差异进入待确认或阻断扩展范围
Show full SKILL.md (164 more words)Show less

RequirementDimensionCompletenessGate(声明完整性)

  • 凡 Skill/报告/清单声明覆盖 RQ-1~RQ-8,正文必须为每一维提供可执行通过条件、至少一类失败反例、必要证据字段与验证路线(或显式 N/A + skipReason 边界)
  • 仅维度总览表/索引而无独立定义 → 本审查层与 validate 探针均视为不完整,不得标 RQ 全覆盖 PASS

DistributionRequirementRealityGate / DomainRealityMatrix(CP1 候选)

  • CP1 候选文档在请求确认前必须形成 CandidateReviewBundleV1,并包含 phaseKind=CP1、RQMatrix、DomainRealityMatrix、ClaimEvidenceMatrix、EscapeAbsorptionQueue;缺任一项不得写“可确认 CP1”。
  • RQMatrix 至少覆盖 RQ-1~RQ-8,每行包含 dimension / status / evidence / gap / disposition / skipReason;只写总评或“已覆盖”不算通过。
  • DomainRealityMatrix 用来防止把分发、包、命令、运行态、授权和阶段状态想当然,至少包含:domain、currentReality、repoEvidence、consumer、decision、negativeProbe、skipReason。
  • 推荐 domain:sourceTruth、packageChannel、licensePolicy、commandSurface、runtimeCapability、phaseKind。不触发的 domain 可 N/A + skipReason,但不能省略整张矩阵。
  • ClaimEvidenceMatrix 将每个关键需求主张映射到原始输入、产品事实源、Profile/仓库证据或 UNVERIFIED 边界;不得把外部审查报告或 AI 推断当作已验证事实。
  • EscapeAbsorptionQueue 记录外部审查/复审发现:sourceClaimId / finding / localEvidence / disposition(adopt|partial|reject|defer) / targetArtifact / owner / status;禁止把外部报告直接粘进需求正文后宣布已吸纳。
  • 负向:缺 DomainRealityMatrix 却确认“包发布/命令/运行态可用”;缺 ClaimEvidenceMatrix 却把假设写成事实;发现外部问题但没有队列和 disposition → 阻断 CP1 确认。

PhaseDeliverySemanticGate(条件)

  • 多阶段需求、路线图或“全部纳入某阶段”必须为每阶段标记 phaseKind=planning-only / design-ready / implementation / release,分别说明 planning coverage 与 source delivery。
  • 建立 PhaseDeliverySemanticMatrix:originalIntent、phaseKind、inScope、sourceDelivery、entry、exit、carryOver、closeRule、confirmationText 必须一致。
  • 执行 OriginalIntentReverseTraceProbe:从用户原始消息、已确认需求和当前阶段反向证明“纳入”指规划、设计、编码还是发布;事实不明时不得默认把全部源码债务锁入当前阶段。
  • CP、技术方案、批次、验收、进度和最终结论出现不同 phaseKind 时为阻断性不一致。

ValidationLifecycleTraceabilityGate(GR-044)

  • 分阶段 / 状态机型需求或明确「先验证再 accepted/final」的任务,验收矩阵不能替代独立验证阶段。
  • 必须能反向追踪:plan → execute → validate → accept/deliver → synthesize → global validate → complete。
  • 最小产物:ValidationPlanV1(进入执行前)、BatchValidationResultV1(批次 accepted 前)、GlobalValidationResultV1(final/completed 前);缺 plan 不得执行/accepted;result=fail/inconclusive 必须隔离并回流,不得静默 final。
  • 负向:exitCode=0 但无 ValidationResult 仍试图 accepted/final → 阻断。
  • 增量分析域已由 incremental-project-analysis 实现同构契约;本门禁要求需求审查与复审清单通用检查,不限于该 Skill。

FrontendExperienceQualityGate 前端 UI / 交互需求(条件)

  • 需求涉及前端页面、组件、控制台、官网、文档站、可视化工具或游戏时,必须说明设计来源或既有风格依据
  • UI 事实源至少覆盖还原度、风格主题一致性、响应式/状态覆盖与视觉验证依据
  • 交互事实源至少覆盖核心用户流、交互反馈、输入方式/可访问性、错误预防/恢复与动效/转场边界
  • 不涉及用户可见 UI / 交互时写 N/A + skipReason

条件治理需求索引

  • 产品/需求事实源不得复制 AI 内部门禁总表。涉及 UI、文档、发布、数据、安全、性能、外部消费者、多批次或治理控制面时,从 ../spec-governance/gate-registry.json 选择 gateGroup,把 Owner、触发原因和派生验证路线交给 CP2/TestRoute
  • 本审查层只判断:需求事实是否充分、产品原文/双方确认是否可追溯、适用 Owner 是否遗漏、阶段关闭条件是否可验证
  • 样例扩展、维度绑定、阶段优先级和功能清单等需求专属规则继续由本 Skill 承接;跨域执行字段归 registry 指向的 Owner Skill
  • 未触发的分组写 N/A + skipReason;不得把 Gate 名录写回产品正文来冒充需求完整性

N/A 规则

  • 纯概念验证无正式需求文档:整体标 N/A
  • 无外部依赖:RQ-5 标 N/A
  • 无项目 profile:RQ-8 标 N/A
  • 未触发跨项目已吸纳守门时,CrossProjectLearnedGuards 标 N/A + skipReason

© devcodex-labs, AGPL-3.0. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file

Files

SKILL.md and 1 other file in content/skills/audit-requirements of devcodex-labs/devcodex.

  • SKILL.md
  • intent.json

Open the folder on GitHubat commit 1dd4525

Compare with similar skills

Audit Requirements next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

Audit Requirements compared with similar skills
SkillStarsUsed inTokensAuto-checkLicenceRepo updated
Audit Requirements this skilldevcodex-labs/devcodex439—~1.7kAutomated safety check: PassAGPL-3.0
Finishing a Development Branchobra/superpowers296k5 repos~1.9kAutomated safety check: PassMIT
Typescript Advanced Typesrolling-scopes/rsschool-app10k24 repos~4.2kAutomated safety check: PassMPL-2.0
PR Babysitteropeninterpreter/openinterpreter69k3 repos~4.2kAutomated safety check: PassApache-2.0
Code Review ChecklistshareAI-lab/learn-claude-code78k5 repos~1.1kAutomated safety check: PassMIT
Greplooponyx-dot-app/onyx32k4 repos~3.3kAutomated safety check: PassMIT

Similar skills

  • Walks the last step of a branch: confirm tests pass, detect the git environment, ask how to integrate, carry out your choice and clean up the worktree.

    296k GitHub starsUsed in 5 repos~1.9k tokens
    DevelopmentAuto-check passed
  • Typescript Advanced Types

    rolling-scopes/rsschool-app

    Master TypeScript's advanced type system including generics, conditional types, mapped types, template literals, and utility types for building type-safe applications.

    10k GitHub starsUsed in 24 repos~4.2k tokens
    DevelopmentAuto-check passed
  • PR Babysitter

    openinterpreter/openinterpreter

    Watches an open GitHub pull request until it merges, handling review comments, diagnosing CI failures and retrying flaky checks along the way.

    69k GitHub starsUsed in 3 repos~4.2k tokens
    DevelopmentAuto-check passed
  • Code Review Checklist

    shareAI-lab/learn-claude-code

    Reviews code against a five-part checklist covering security, correctness, performance, maintainability and testing, and reports findings in a fixed format.

    78k GitHub starsUsed in 5 repos~1.1k tokens
    DevelopmentAuto-check passed
  • Greploop

    onyx-dot-app/onyx

    Iteratively improves a PR (GitHub), MR (GitLab), or shelved changelist (Perforce) until Greptile gives it a 5/5 confidence score with zero unresolved comments.

    32k GitHub starsUsed in 4 repos~3.3k tokens
    DevelopmentAuto-check passed
  • Guidelines

    akash-network/node

    Behavioral guidelines to reduce common LLM coding mistakes. An agent skill from akash-network/node.

    1.1k GitHub starsUsed in 22 repos~577 tokens
    DevelopmentAuto-check passed

More from devcodex-labs/devcodex

All 70 skills in this repo
  • Accessibility I18n

    devcodex-labs/devcodex

    无障碍与国际化专家 Owner — 当任务涉及可访问性、键盘操作、焦点、屏幕阅读器、ARIA、语言地区、本地化、RTL、翻译资源、用户可见文案或多语言文档时使用;要求把包容性体验和本地化验证绑定到真实用户路径。

    439 GitHub stars~718 tokensUpdated 21 days ago
    Auto-check passed
  • AI Agent System Architecture

    devcodex-labs/devcodex

    AI Agent 系统架构专家 Owner — 当任务涉及 Agent 路由、工具调用、上下文管理、记忆、状态机、权限、人机协作、可观测性、回放验证或模型辅助治理时使用;要求把 Agent 行为设计成可解释、可恢复、可审计。

    439 GitHub stars~2.4k tokensUpdated 21 days ago
    Auto-check passed
  • API Contract Architecture

    devcodex-labs/devcodex

    API 契约架构专家 Owner — 当任务涉及 public API、HTTP/SDK/CLI 契约、版本兼容、错误模型、分页过滤、幂等、Schema、类型、迁移或消费者影响时使用;要求先冻结消费者契约,再设计实现与验证。

    439 GitHub stars~865 tokensUpdated 21 days ago
    Auto-check passed
  • Architecture Design

    devcodex-labs/devcodex

    架构设计文档编排 Owner — 当用户要求架构设计、系统设计、技术架构或可指导开发、Review 与任务拆分的完整方案时使用;要求从业务流程反推节点、状态、数据、一致性、异常补偿、ADR 与实施任务。

    439 GitHub stars~1.1k tokensUpdated 21 days ago
    Auto-check passed
  • Audit Common

    devcodex-labs/devcodex

    审查公共维度 G0~G5 + Profile Freshness Check — 所有 audit 子类型必先执行的基础维度层

    439 GitHub stars~4.1k tokensUpdated 21 days ago
    Auto-check passed
  • Audit Session

    devcodex-labs/devcodex

    审计工作流的跨会话状态机 — 在 <audit-root/.audit-state/<session-id.json 持久化轮次/发现项/收敛状态,支持 Token 中断后精准恢复

    439 GitHub stars~1.8k tokensUpdated 21 days ago
    Auto-check passed

Categories

Questions about Audit Requirements

What does Audit Requirements do?

需求文档审查维度 RQ-1~RQ-8 — 需求定义/功能描述/产品事实源与可派生验证边界专属审查层. An agent skill from devcodex-labs/devcodex. Audit Requirements is an agent skill from devcodex-labs/devcodex.

When should I use Audit Requirements?

Audit Requirements fits situations like: development work in your project.

How do I install Audit Requirements in Claude Code?

Run `npx skills add devcodex-labs/devcodex --skill audit-requirements -a claude-code`. Or copy the skill folder (content/skills/audit-requirements in devcodex-labs/devcodex) into .claude/skills/audit-requirements in your project. Claude Code loads it when a task matches its description.

How do I install Audit Requirements in Codex?

Run `npx skills add devcodex-labs/devcodex --skill audit-requirements -a codex`. Or copy the skill folder (content/skills/audit-requirements in devcodex-labs/devcodex) into .agents/skills/audit-requirements in your project. Codex loads it when a task matches its description.

Can I use Audit Requirements in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add devcodex-labs/devcodex --skill audit-requirements -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/audit-requirements, .gemini/skills/audit-requirements, .github/skills/audit-requirements and .opencode/skills/audit-requirements in your project.

What does Audit Requirements need to run?

SKILL.md names no scripts, command-line tools or credentials: Audit Requirements is instructions for the agent only.

Does Audit Requirements access the network?

SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.

Is Audit Requirements safe to install?

Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.

What licence does Audit Requirements use?

Audit Requirements is published under the AGPL-3.0 licence (the repository's licence). It allows redistribution, so the full SKILL.md is shown on this page.

How many tokens does Audit Requirements use?

About 1.7k tokens (SKILL.md is roughly 7k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.

What are the alternatives to Audit Requirements?

Skills that share tags, products or a category with Audit Requirements: Finishing a Development Branch (obra/superpowers, 296k stars), Typescript Advanced Types (rolling-scopes/rsschool-app, 10k stars), PR Babysitter (openinterpreter/openinterpreter, 69k stars) and Code Review Checklist (shareAI-lab/learn-claude-code, 78k stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains Audit Requirements?

devcodex-labs (a GitHub organization) maintains it in devcodex-labs/devcodex, which has 439 GitHub stars. The repository holds 70 skills in this directory. The repository was last updated on September 17, 2026.

Source: devcodex-labs/devcodex on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.