Agent skill

Deep Audit

by ipea in ipea/geobr

Deep consistency audit of the geobr repository — configuration, documentation, and the two packages.

No licenceAuto-check: notesAgent Workflows

Install Deep Audit

skills CLI
$ npx skills add ipea/geobr --skill deep-audit -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI
$ gh skill install ipea/geobr deep-audit --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy
$ git clone --depth 1 https://github.com/ipea/geobr.git skills-src && mkdir -p .claude/skills && cp -r skills-src/.claude/skills/deep-audit .claude/skills/deep-audit && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Facts

Skill name
deep-audit
GitHub stars
959
Token cost
~1.8k tokens
SKILL.md length
666 words
Files
1
Skills in repo
9
Repo updated
First seen
Licence
None found

At a glance

Deep consistency audit of the geobr repository — configuration, documentation, and the two packages.

  • Works in 5 steps: Mechanical checks (run FIRST — cheap and… → Launch parallel audit agents → Triage → …
  • Find inconsistencies
  • SKILL.md covers When to Use, Workflow and Output Format
  • Calls uv and gh

What it does

Deep Audit is an agent skill from ipea/geobr. Deep consistency audit of the geobr repository — configuration, documentation, and the two packages. Launches parallel specialist agents to find factual errors, dead references, drift between the R and Python sides, and claims that no longer match disk. Then fixes what is genuinely broken and loops until clean. Use after broad changes, before a release, or when the user says "audit", "find inconsistencies", "check everything".

Its SKILL.md is about 1.8k tokens, which your agent loads only when the skill is triggered. It is a single SKILL.md file with no bundled scripts.

It sits in Agent Workflows. It works with Python. The repository describes itself as: Easy access to official spatial data sets of Brazil in R and Python.

When your agent uses it

  • Find inconsistencies
  • Check everything

Example prompts

  • “find inconsistencies”
  • “check everything”
  • “/deep-audit”

Requirements

  • Python 3
  • Pre-approved tools (allowed-tools): Read, Write, Edit, Bash, Glob, Grep, Task

Workflow steps

5 steps, taken from the step headings in SKILL.md.

  1. Mechanical checks (run FIRST — cheap and deterministic)
  2. Launch parallel audit agents
  3. Triage
  4. Fix
  5. Loop-until-dry

What it can do on your machine

Read from SKILL.md and the folder at commit 0969f92. It shows what the files ask for, not the result of running them.

  • Tool permissions

    Pre-approves these tools, so the agent can use them without asking each time:

    • Read
    • Write
    • Edit
    • Bash
    • Glob
    • Grep
    • Task

    From allowed-tools in the SKILL.md frontmatter.

  • Runs code

    Shell commands in SKILL.md call:

    • uv
    • gh

    From the folder's file list and the shell code blocks in SKILL.md.

  • Network

    No URLs in SKILL.md. Its commands use uv and gh, which can reach the network depending on how they are called.

    From URLs in SKILL.md, links to its own repository left out.

  • Credentials

    Names no API keys, tokens, secrets or passwords.

    From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

Deep Audit loads about 1.8k tokens when it runs. Until then it costs about 110 tokens; SKILL.md has 666 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it
~110
When it runs · the whole SKILL.md, loaded when a task matches
~1.8k

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check: notes

The automated check noted patterns worth knowing about, such as sudo or a known installer.

  • NotePre-approves every shell command (allowed-tools: Bash)SKILL.md
    allowed-tools: Read, Write, Edit, Bash, Glob, Grep, Task

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.

SKILL.md

Without a licence we can't republish the file, so here is its outline and opening line. It has 666 words (~1,838 tokens).

“There is no check script in this repo, so run these directly. Each is a class of bug that agent prompts historically miss because attention drifts across a long checklist.”

— opening of SKILL.md by ipea
name
deep-audit
allowed-tools
Read, Write, Edit, Bash, Glob, Grep, Task
author
geobr
version
2.0.0
disable-model-invocation
true
effort
high

Read the full SKILL.md on GitHub

Files

Just SKILL.md in .claude/skills/deep-audit of ipea/geobr.

Open the folder on GitHubat commit 0969f92

Compare with similar skills

Deep Audit next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

Deep Audit compared with similar skills
SkillStarsUsed inTokensAuto-checkLicenceRepo updated
Deep Audit this skillipea/geobr959—~1.8kAutomated safety check: NotesNone
MCP Server Builderanthropics/skills180k64 repos~2.3kAutomated safety check: PassApache-2.0
MCP Server BuildershareAI-lab/learn-claude-code78k5 repos~1.2kAutomated safety check: PassMIT
Fastmcp Client CLIPrefectHQ/fastmcp28k1 repos~823Automated safety check: PassApache-2.0
Mem0 CLI Memory Commandsmem0ai/mem067k—~2kAutomated safety check: NotesApache-2.0
MemPalace Setup and OperationMemPalace/mempalace59k—~2.2kAutomated safety check: PassMIT

Similar skills

  • MCP Server Builder

    anthropics/skills

    Official

    Guides the design and implementation of Model Context Protocol servers in TypeScript or Python, from tool naming and error messages to evaluation.

    180k GitHub starsUsed in 64 repos~2.3k tokens
    Agent WorkflowsAuto-check passed
  • MCP Server Builder

    shareAI-lab/learn-claude-code

    Walks through building MCP servers in Python or TypeScript that expose tools, resources and prompts to Claude, with templates, registration and testing.

    78k GitHub starsUsed in 5 repos~1.2k tokens
    Agent WorkflowsAuto-check passed
  • Fastmcp Client CLI

    PrefectHQ/fastmcp

    Query and invoke tools on MCP servers using fastmcp list and fastmcp call.

    28k GitHub starsUsed in 1 repo~823 tokens
    Agent WorkflowsAuto-check passed
  • Adds, searches, lists, updates and deletes memories on the Mem0 platform from the terminal with the mem0 command, including a JSON mode built for agents.

    67k GitHub stars~2k tokensUpdated today
    Agent WorkflowsAuto-check: notes
  • Installs and configures MemPalace as a private local palace, a shared-brain hub or a client of an existing hub, including MCP registration and version-correct initialization.

    59k GitHub stars~2.2k tokensUpdated today
    Agent WorkflowsAuto-check passed
  • Install and Run Cognee

    topoteretes/cognee

    Installs the cognee AI memory library in a Python environment, sets the LLM key and gets a first remember and recall script running with the Python SDK.

    32k GitHub starsUsed in 1 repo~1k tokens
    Agent WorkflowsAuto-check: notes

More from ipea/geobr

All 9 skills in this repo
  • Learn

    ipea/geobr

    Extract reusable knowledge from the current session into a persistent skill.

    959 GitHub starsUsed in 2 repos~1.2k tokens
    Auto-check: notes
  • Checkpoint

    ipea/geobr

    Save a structured state snapshot the next session can resume from — active plan, decisions and why, file pointers with line numbers, open questions, next 1-3 actions, and what to deliberately forget.

    959 GitHub stars~1.4k tokensUpdated 10 days ago
    Auto-check: notes
  • Diagnose

    ipea/geobr

    Root-cause a failing or wrong geobr call with a disciplined check-the-environment-first loop instead of guessing.

    959 GitHub stars~1.5k tokensUpdated 10 days ago
    Auto-check passed
  • Parity Check

    ipea/geobr

    Check R↔Python API parity across geobr's two packages — which read functions exist on one side but not the other, and where matched functions disagree on argument names, defaults, or the metadata…

    959 GitHub stars~1.4k tokensUpdated 10 days ago
    Auto-check: notes
  • Run the Python package release gate for geobr — sync the locked environment, run the offline and network test suites, build the distribution, and review the source against the Python conventions.

    959 GitHub stars~1.4k tokensUpdated 10 days ago
    Auto-check: notes
  • R Package Check

    ipea/geobr

    Run the full R package release gate — regenerate docs, run the test suite, run R CMD check --as-cran, and triage every ERROR / WARNING / NOTE against CRAN policy before a release or submission.

    959 GitHub stars~1.5k tokensUpdated 10 days ago
    Auto-check: notes

Works with

Categories

Questions about Deep Audit

What does Deep Audit do?

Deep consistency audit of the geobr repository — configuration, documentation, and the two packages. Deep Audit is an agent skill from ipea/geobr. Deep consistency audit of the geobr repository — configuration, documentation, and the two packages.

When should I use Deep Audit?

Deep Audit fits situations like: find inconsistencies; check everything.

How do I install Deep Audit in Claude Code?

Run `npx skills add ipea/geobr --skill deep-audit -a claude-code`. Or copy the skill folder (.claude/skills/deep-audit in ipea/geobr) into .claude/skills/deep-audit in your project. Claude Code loads it when a task matches its description.

How do I install Deep Audit in Codex?

Run `npx skills add ipea/geobr --skill deep-audit -a codex`. Or copy the skill folder (.claude/skills/deep-audit in ipea/geobr) into .agents/skills/deep-audit in your project. Codex loads it when a task matches its description.

Can I use Deep Audit in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add ipea/geobr --skill deep-audit -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/deep-audit, .gemini/skills/deep-audit, .github/skills/deep-audit and .opencode/skills/deep-audit in your project.

What does Deep Audit need to run?

Going by SKILL.md and its folder, Deep Audit needs the command-line tools its instructions call (uv and gh). Our summary lists: Python 3. Its frontmatter pre-approves these tools: Read, Write, Edit, Bash, Glob, Grep, Task.

Does Deep Audit access the network?

SKILL.md contains no URLs. Its commands use uv and gh, which can reach the network depending on how they are called. This is read from the text; nothing was executed.

Is Deep Audit safe to install?

Our automated static check of SKILL.md found notes only (pre-approves every shell command (allowed-tools: bash)), nothing it rates as a warning. It is not a guarantee. Review the folder before installing.

What licence does Deep Audit use?

No licence was found for Deep Audit or its repository. Without one, default copyright applies: ask the author before reusing or redistributing it.

How many tokens does Deep Audit use?

About 1.8k tokens (SKILL.md is roughly 7.4k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.

What are the alternatives to Deep Audit?

Skills that share tags, products or a category with Deep Audit: MCP Server Builder (anthropics/skills, 180k stars), MCP Server Builder (shareAI-lab/learn-claude-code, 78k stars), Fastmcp Client CLI (PrefectHQ/fastmcp, 28k stars) and Mem0 CLI Memory Commands (mem0ai/mem0, 67k stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains Deep Audit?

ipea (a GitHub organization) maintains it in ipea/geobr, which has 959 GitHub stars. The repository holds 9 skills in this directory. The repository was last updated on September 27, 2026.

Source: ipea/geobr on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.