Agent skill

Final Audit

by maiobarbero in maiobarbero/my-ai-workflow

Run a cross-cutting audit across all code produced for a feature.

No licenceAuto-check passedProduct & Project Management

Install Final Audit

skills CLI
$ npx skills add maiobarbero/my-ai-workflow --skill final-audit -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI
$ gh skill install maiobarbero/my-ai-workflow final-audit --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy
$ git clone --depth 1 https://github.com/maiobarbero/my-ai-workflow.git skills-src && mkdir -p .claude/skills && cp -r skills-src/skills/final-audit .claude/skills/final-audit && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Facts

Skill name
final-audit
GitHub stars
140
Token cost
~1.3k tokens
SKILL.md length
726 words
Files
1
Skills in repo
7
Repo updated
First seen
Licence
None found

At a glance

Run a cross-cutting audit across all code produced for a feature.

  • Works in 7 steps: Locate the feature → Identify the scope → Explore the implementation → …
  • A feature is complete
  • SKILL.md covers Process, Summary, Critical findings and High findings, plus 3 more sections
  • Instructions only: no scripts, shell commands, URLs or credentials in SKILL.md

What it does

Final Audit is an agent skill from maiobarbero/my-ai-workflow. Run a cross-cutting audit across all code produced for a feature. Use when a feature is complete, all PRs are merged, and the user wants a final review for security issues, logic errors, consistency, and best practices.

Its SKILL.md is about 1.3k tokens, which your agent loads only when the skill is triggered. It is a single SKILL.md file with no bundled scripts.

It sits in Product & Project Management.

When your agent uses it

  • A feature is complete
  • All PRs are merged
  • The user wants a final review for security issues

Example prompts

  • “/final-audit”

Workflow steps

7 steps, taken from the step headings in SKILL.md.

  1. Locate the feature
  2. Identify the scope
  3. Explore the implementation
  4. Audit for systemic issues
  5. Prioritise findings
  6. Present the report
  7. Save the report

What it can do on your machine

Read from SKILL.md and the folder at commit 7748c8e. It shows what the files ask for, not the result of running them.

  • Tool permissions

    Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.

    From allowed-tools in the SKILL.md frontmatter.

  • Runs code

    No scripts in the folder and no shell commands in SKILL.md.

    From the folder's file list and the shell code blocks in SKILL.md.

  • Network

    No URLs in SKILL.md.

    From URLs in SKILL.md, links to its own repository left out.

  • Credentials

    Names no API keys, tokens, secrets or passwords.

    From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

Final Audit loads about 1.3k tokens when it runs. Until then it costs about 58 tokens; SKILL.md has 726 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it
~58
When it runs · the whole SKILL.md, loaded when a task matches
~1.3k

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check passed

The automated check found no risky patterns in SKILL.md.

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.

SKILL.md

Without a licence we can't republish the file, so here is its outline and opening line. It has 726 words (~1,311 tokens).

“Review all code produced for a feature as a whole, looking for issues that are only visible across the full implementation — not within a single PR.”

— opening of SKILL.md by maiobarbero
name
final-audit

Read the full SKILL.md on GitHub

Files

Just SKILL.md in skills/final-audit of maiobarbero/my-ai-workflow.

Open the folder on GitHubat commit 7748c8e

Compare with similar skills

Final Audit next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

Final Audit compared with similar skills
SkillStarsUsed inTokensAuto-checkLicenceRepo updated
Final Audit this skillmaiobarbero/my-ai-workflow140—~1.3kAutomated safety check: PassNone
User Story Writerdeanpeters/Product-Manager-Skills7.2k2 repos~2.9kAutomated safety check: PassCustom licence
Game Changing FeaturesopenstatusHQ/data-table-filters2.3k3 repos~2.1kAutomated safety check: PassMIT
CCPM Project Managementautomazeio/ccpm8.4k—~1.1kAutomated safety check: PassMIT
Convex Create Componentspokvulcan/poker-planning1148 repos~2.6kAutomated safety check: PassMIT
Self Improving Agentfarm-fe/farm5.6k2 repos~3.3kAutomated safety check: NotesMIT

Similar skills

  • User Story Writer

    deanpeters/Product-Manager-Skills

    Writes user stories in Mike Cohn's format with Gherkin acceptance criteria, turning user needs into development-ready work with testable conditions.

    7.2k GitHub starsUsed in 2 repos~2.9k tokens
    Product & Project ManagementAuto-check passed
  • Game Changing Features

    openstatusHQ/data-table-filters

    Find 10x product opportunities and high-leverage improvements.

    2.3k GitHub starsUsed in 3 repos~2.1k tokens
    Product & Project ManagementAuto-check passed
  • Runs a spec-driven workflow from PRD to epic to GitHub issues to parallel agents, with status, standup and blocked-work reports from bundled scripts.

    8.4k GitHub stars~1.1k tokensUpdated 6 mo ago
    Product & Project ManagementAuto-check passed
  • Convex Create Component

    spokvulcan/poker-planning

    Builds reusable Convex components with isolated tables and app-facing APIs.

    114 GitHub starsUsed in 8 repos~2.6k tokens
    Product & Project ManagementAuto-check passed
  • A universal self-improving agent that learns from ALL skill experiences.

    5.6k GitHub starsUsed in 2 repos~3.3k tokens
    Product & Project ManagementAuto-check: notes
  • Builds a weekly engineering retrospective from git history: commit counts, per-person contributions, work patterns and code quality numbers over a chosen window.

    136k GitHub stars~2.4k tokensUpdated today
    Product & Project ManagementAuto-check passed

More from maiobarbero/my-ai-workflow

  • Project Complexity Action Planner

    maiobarbero/my-ai-workflow

    Convert a project complexity diagnosis into a practical intervention plan.

    140 GitHub stars~932 tokensUpdated 5 mo ago
    Auto-check passed
  • Project Complexity Mapper

    maiobarbero/my-ai-workflow

    Diagnose project complexity from a rough project description using the DelftX TOE framework and detail/dynamic complexity model.

    140 GitHub stars~994 tokensUpdated 5 mo ago
    Auto-check passed
  • Code Review

    maiobarbero/my-ai-workflow

    Perform a language-agnostic first-pass code review covering logic errors, bad practices, operation ordering, magic strings, pattern improvements, strict type checking, and SQL injection.

    140 GitHub stars~1.2k tokensUpdated 5 mo ago
    Auto-check passed
  • Issues To Tasks

    maiobarbero/my-ai-workflow

    Break an issue file into concrete, ordered, AI-executable tasks.

    140 GitHub stars~741 tokensUpdated 5 mo ago
    Auto-check passed
  • Prd To Issues

    maiobarbero/my-ai-workflow

    Break a PRD into independently-grabbable issues using tracer-bullet vertical slices.

    140 GitHub stars~862 tokensUpdated 5 mo ago
    Auto-check passed
  • Write A Prd

    maiobarbero/my-ai-workflow

    Create a PRD through user interview, codebase exploration, and module design, then save it as a file.

    140 GitHub stars~1.1k tokensUpdated 5 mo ago
    Auto-check passed

Questions about Final Audit

What does Final Audit do?

Run a cross-cutting audit across all code produced for a feature. Final Audit is an agent skill from maiobarbero/my-ai-workflow. Run a cross-cutting audit across all code produced for a feature.

When should I use Final Audit?

Final Audit fits situations like: A feature is complete; all PRs are merged; the user wants a final review for security issues.

How do I install Final Audit in Claude Code?

Run `npx skills add maiobarbero/my-ai-workflow --skill final-audit -a claude-code`. Or copy the skill folder (skills/final-audit in maiobarbero/my-ai-workflow) into .claude/skills/final-audit in your project. Claude Code loads it when a task matches its description.

How do I install Final Audit in Codex?

Run `npx skills add maiobarbero/my-ai-workflow --skill final-audit -a codex`. Or copy the skill folder (skills/final-audit in maiobarbero/my-ai-workflow) into .agents/skills/final-audit in your project. Codex loads it when a task matches its description.

Can I use Final Audit in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add maiobarbero/my-ai-workflow --skill final-audit -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/final-audit, .gemini/skills/final-audit, .github/skills/final-audit and .opencode/skills/final-audit in your project.

What does Final Audit need to run?

SKILL.md names no scripts, command-line tools or credentials: Final Audit is instructions for the agent only.

Does Final Audit access the network?

SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.

Is Final Audit safe to install?

Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.

What licence does Final Audit use?

No licence was found for Final Audit or its repository. Without one, default copyright applies: ask the author before reusing or redistributing it.

How many tokens does Final Audit use?

About 1.3k tokens (SKILL.md is roughly 5.2k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.

What are the alternatives to Final Audit?

Skills that share tags, products or a category with Final Audit: User Story Writer (deanpeters/Product-Manager-Skills, 7.2k stars), Game Changing Features (openstatusHQ/data-table-filters, 2.3k stars), CCPM Project Management (automazeio/ccpm, 8.4k stars) and Convex Create Component (spokvulcan/poker-planning, 114 stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains Final Audit?

maiobarbero (a GitHub user) maintains it in maiobarbero/my-ai-workflow, which has 140 GitHub stars. The repository holds 7 skills in this directory. The repository was last updated on May 7, 2026.

Source: maiobarbero/my-ai-workflow on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.