Agent skill

Audit Agents

by dzhng in dzhng/skills

Audit or rewrite AGENTS.md so it holds only lasting principles.

MITAuto-check passedAgent Workflows

Install Audit Agents

skills CLI
$ npx skills add dzhng/skills --skill audit-agents -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI
$ gh skill install dzhng/skills audit-agents --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy
$ git clone --depth 1 https://github.com/dzhng/skills.git skills-src && mkdir -p .claude/skills && cp -r skills-src/skills/authoring/audit-agents .claude/skills/audit-agents && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Facts

Skill name
audit-agents
GitHub stars
1k
Token cost
~847 tokens
SKILL.md length
529 words
Files
2 (incl. assets)
Skills in repo
27
Repo updated
First seen
Licence
MIT

At a glance

Audit or rewrite AGENTS.md so it holds only lasting principles.

  • Works in 5 steps: Read the AGENTS.md and the root readme.… → Give every line one verdict, using the… → Check the shape against the example below. → …
  • Asks for it by name
  • SKILL.md covers Workflow, Tests for a line and Shape
  • Instructions only: no scripts, shell commands, URLs or credentials in SKILL.md

What it does

Audit Agents is an agent skill from dzhng/skills. Audit or rewrite AGENTS.md so it holds only lasting principles. Run it only when the user asks for it by name; never invoke it on your own.

Its SKILL.md is about 850 tokens, which your agent loads only when the skill is triggered. The skill folder holds 2 other files, including assets (for example `assets/example-agents.md`).

It sits in Agent Workflows, covering Agent instruction files. The repository describes itself as: Reusable AI agent skills for software factories: explore ideas, write specs, implement, review, and run autonomous research. Works with Claude Code, Codex, and other… The licence is MIT.

When your agent uses it

  • Asks for it by name
  • Never invoke it on your own

Example prompts

  • “/audit-agents”

Workflow steps

5 steps, taken from the first numbered list in SKILL.md.

  1. Read the AGENTS.md and the root readme. This is a document audit: run no builds and no tests.
  2. Give every line one verdict, using the tests below.
  3. Check the shape against the example below.
  4. Report the findings, highest impact first. Quote each line, give its verdict and the replacement text, and group repeats. Report no…
  5. Edit only when the user asks for a rewrite. Then start from the example, write the file, and reread it as a newcomer with no history of…

What it can do on your machine

Read from SKILL.md and the folder at commit d513228. It shows what the files ask for, not the result of running them.

  • Tool permissions

    Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.

    From allowed-tools in the SKILL.md frontmatter.

  • Runs code

    No scripts in the folder and no shell commands in SKILL.md.

    From the folder's file list and the shell code blocks in SKILL.md.

  • Network

    No URLs in SKILL.md.

    From URLs in SKILL.md, links to its own repository left out.

  • Credentials

    Names no API keys, tokens, secrets or passwords.

    From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

Audit Agents loads about 847 tokens when it runs. Until then it costs about 38 tokens; SKILL.md has 529 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it
~38
When it runs · the whole SKILL.md, loaded when a task matches
~847

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check passed

The automated check found no risky patterns in SKILL.md.

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.

SKILL.md

The full file from dzhng/skills at commit d513228, republished under its MIT licence (© dzhng). 529 words, ~847 tokens.

Download SKILL.mdSave it as .claude/skills/audit-agents/SKILL.md (or your agent's skills folder). This skill also uses 1 other file; get the full folder from GitHub.
name
audit-agents
description
Audit or rewrite AGENTS.md so it holds only lasting principles. Run it only when the user asks for it by name; never invoke it on your own.
disable-model-invocation
true

Audit Agents

AGENTS.md is read by everyone who will ever work on the project. Picture the next thousand contributors over the next hundred years: a line belongs only if it is still true, and still changes what they do, after every file, tool and dependency has been replaced.

Workflow

  1. Read the AGENTS.md and the root readme. This is a document audit: run no builds and no tests.
  2. Give every line one verdict, using the tests below.
    • Keep: a principle that passes every test.
    • Rephrase: a lasting lesson worded in today's mechanics, or too vague to act on.
    • Move: a detail someone needs. Name the owner it belongs to: a readme, a manifest, a skill or a spec.
    • Delete: repetition, history, or a line that changes nothing.
  3. Check the shape against the example below.
  4. Report the findings, highest impact first. Quote each line, give its verdict and the replacement text, and group repeats. Report no finding you can't quote.
  5. Edit only when the user asks for a rewrite. Then start from the example, write the file, and reread it as a newcomer with no history of this session.

Tests for a line

  • A hundred years. No commands, flags, paths, file or function names, dependency choices, tuned values, plans, status or bug stories. Keep the lesson and move the mechanics to their owner. The one exception is a pointer to an owner (a readme or a skill), which exists so the detail can live there.
  • A thousand people. A newcomer can act on it without knowing this session, this author or this month's work.
  • Changes what they do. Delete a line a capable contributor already follows.
  • Plain and concrete. A principle is not an abstraction. "Look at the picture" works; "match verification to the claim" doesn't. Prefer a short sentence with its consequence, and one example from the product over a general noun.
  • Iteration speed. This is the core principle and must be stated outright: optimize the time to feedback you can trust, run the narrowest check that answers the question, and run everything once, when the spec's implementation is finished. Flag any rule that adds process to every loop, puts the full run before a commit, merge, push or finished feature, or names checkpoints for it along the way. The full run comes earlier only when the next piece of work can't be trusted without it. Never trade away a real acceptance requirement for speed.
Show full SKILL.md (120 more words)Show less

Shape

assets/example-agents.md is an AGENTS.md any project can adopt, and it owns the section order. Read it before judging the shape or rewriting.

To adopt it, copy it and resolve every <…>; none may survive into the project's file.

  • <skill: name> names a skill from the pack this skill ships in. Replace it with a link to that skill where the project installs it. If the project doesn't have the skill, drop the pointer and keep the principle.
  • <skill: the project's own …> stands for a skill only this project has. Link it, or delete the sentence.
  • Every other <…> is filled from the project's readme.

Delete a section the project doesn't need; add one only for a principle that fits nowhere else.

© dzhng, MIT. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file

Files

SKILL.md and 1 other file (assets) in skills/authoring/audit-agents of dzhng/skills.

  • SKILL.md
  • assets/example-agents.md

Open the folder on GitHubat commit d513228

Used in 1 other repository

We found 1 copy of this SKILL.md (exact, near-identical or edited) in other folders. This page covers the copy in dzhng/skills, which our catalogue first saw on October 7, 2026.

Compare with similar skills

Audit Agents next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

Audit Agents compared with similar skills
SkillStarsUsed inTokensAuto-checkLicenceRepo updated
Audit Agents this skilldzhng/skills1k—~847Automated safety check: PassMIT
Using Agent Skillsaddyosmani/agent-skills103k4 repos~2.4kAutomated safety check: PassMIT
Claude ReflectBayramAnnakov/claude-reflect1.7k2 repos~627Automated safety check: PassMIT
Writing For Agentsbestofjs/bestofjs3.1k19 repos~2.7kAutomated safety check: PassMIT
Neat-Freak Knowledge CloseoutKKKKhazix/khazix-skills21k—~1.9kAutomated safety check: PassMIT
Task Observerrebelytics/one-skill-to-rule-them-all3.2k1 repos~12kAutomated safety check: PassCC-BY-4.0

Similar skills

  • Using Agent Skills

    addyosmani/agent-skills

    Meta-skill for choosing which workflow skill fits the task at hand, plus always-on habits: surface assumptions, stop on confusion, push back, keep it simple and stay in scope.

    103k GitHub starsUsed in 4 repos~2.4k tokens
    Agent WorkflowsAuto-check passed
  • Claude Reflect

    BayramAnnakov/claude-reflect

    Self-learning system that captures corrections during sessions and reminds users to run /reflect to update CLAUDE.md.

    1.7k GitHub starsUsed in 2 repos~627 tokens
    Agent WorkflowsAuto-check passed
  • Writing For Agents

    bestofjs/bestofjs

    Writing documents for agents. An agent skill from bestofjs/bestofjs.

    3.1k GitHub starsUsed in 19 repos~2.7k tokens
    Agent WorkflowsAuto-check passed
  • Neat-Freak Knowledge Closeout

    KKKKhazix/khazix-skills

    Brings project docs, agent rule files, authorized memory and leftover workspace files back in line with what the code and runtime actually do at the end of a work session.

    21k GitHub stars~1.9k tokensUpdated 7 days ago
    Agent WorkflowsAuto-check passed
  • Task Observer

    rebelytics/one-skill-to-rule-them-all

    Monitors task execution for skill improvement opportunities.

    3.2k GitHub starsUsed in 1 repo~12k tokens
    Agent WorkflowsAuto-check passed
  • SkillOpt Sleep Cycle

    microsoft/SkillOpt

    Official

    Runs an on-demand or nightly sleep cycle that reviews past Claude Code sessions and proposes validated updates to CLAUDE.md and skills.

    18k GitHub stars~2.3k tokensUpdated 2 days ago
    Agent WorkflowsAuto-check passed

More from dzhng/skills

All 27 skills in this repo
  • Compare screenshots against the intended design, distinguishing approved references from historical baselines.

    1k GitHub stars~2.6k tokensUpdated 3 days ago
    Auto-check passed
  • Claude

    dzhng/skills

    Use Claude Code as an independent claude -p subagent when the user explicitly asks for Claude, wants a second-agent opinion from Claude, or asks to delegate a well-scoped task to Claude.

    1k GitHub stars~1.3k tokensUpdated 3 days ago
    Auto-check passed
  • Refactor Clean

    dzhng/skills

    Refactor cleanly instead of layering sediment. An agent skill from dzhng/skills.

    1k GitHub stars~3.1k tokensUpdated 3 days ago
    Auto-check passed
  • Write Skills

    dzhng/skills

    Create or revise agent skills. An agent skill from dzhng/skills.

    1k GitHub stars~2.7k tokensUpdated 3 days ago
    Auto-check passed
  • Codex

    dzhng/skills

    Use the local Codex CLI as an independent second agent. An agent skill from dzhng/skills.

    1k GitHub stars~2.4k tokensUpdated 3 days ago
    Auto-check: warnings
  • Run [implement-spec](../implement-spec/SKILL.md) with Codex doing the implementation passes while you orchestrate, integrate, and review.

    1k GitHub starsUsed in 1 repo~543 tokens
    Auto-check passed

Categories

Questions about Audit Agents

What does Audit Agents do?

Audit or rewrite AGENTS.md so it holds only lasting principles. Audit Agents is an agent skill from dzhng/skills.md so it holds only lasting principles.

When should I use Audit Agents?

Audit Agents fits situations like: asks for it by name; never invoke it on your own.

How do I install Audit Agents in Claude Code?

Run `npx skills add dzhng/skills --skill audit-agents -a claude-code`. Or copy the skill folder (skills/authoring/audit-agents in dzhng/skills) into .claude/skills/audit-agents in your project. Claude Code loads it when a task matches its description.

How do I install Audit Agents in Codex?

Run `npx skills add dzhng/skills --skill audit-agents -a codex`. Or copy the skill folder (skills/authoring/audit-agents in dzhng/skills) into .agents/skills/audit-agents in your project. Codex loads it when a task matches its description.

Can I use Audit Agents in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add dzhng/skills --skill audit-agents -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/audit-agents, .gemini/skills/audit-agents, .github/skills/audit-agents and .opencode/skills/audit-agents in your project.

What does Audit Agents need to run?

SKILL.md names no scripts, command-line tools or credentials: Audit Agents is instructions for the agent only.

Does Audit Agents access the network?

SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.

Is Audit Agents safe to install?

Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.

What licence does Audit Agents use?

Audit Agents is published under the MIT licence (the repository's licence). It allows redistribution, so the full SKILL.md is shown on this page.

How many tokens does Audit Agents use?

About 847 tokens (SKILL.md is roughly 3.4k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.

What are the alternatives to Audit Agents?

Skills that share tags, products or a category with Audit Agents: Using Agent Skills (addyosmani/agent-skills, 103k stars), Claude Reflect (BayramAnnakov/claude-reflect, 1.7k stars), Writing For Agents (bestofjs/bestofjs, 3.1k stars) and Neat-Freak Knowledge Closeout (KKKKhazix/khazix-skills, 21k stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains Audit Agents?

dzhng (a GitHub user) maintains it in dzhng/skills, which has 1,016 GitHub stars. The repository holds 27 skills in this directory. The repository was last updated on October 5, 2026.

Source: dzhng/skills on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.