audit-hooks
Audit Claude Code hooks for quality, compliance, and maintainability. Use after creating hooks, before releases, or for periodic quality checks.
What this skill does
# Audit Hooks Command Audit Claude Code hooks for quality, compliance, and maintainability. ## Initialization Before auditing, initialize the environment: Get the current UTC date, capture the project root path, ensure the temp directory exists, and clean up any stale audit files if the user confirms. The `hook-management` skill provides authoritative validation guidance (auto-loaded when this command runs). ## What Gets Audited - hooks.json configuration structure and validity - Hook script existence and structure - Matcher configuration appropriateness - Environment variable naming conventions - Decision control usage - Test existence and coverage ## Command Arguments | Argument | Description | | --- | --- | | *(none)* | Smart mode: audit only modified, never-audited, or stale (>90 days) hooks | | `--force` | Audit ALL hooks regardless of status | | `--skip-validation` | Skip finding validation (faster, but may include false positives) | | `--plugin-only` | Only audit local plugin hooks | | `--project-only` | Only audit project hooks (`.claude/hooks/`) | | `--global-only` | Only audit globally installed plugin hooks | | `hook-name` | Audit specific hook(s) by name | | `plugin:name` | Explicitly target plugin hook | ## Step 1: Discover Hook Sources Detect all hook sources in local repo and globally installed plugins. For local discovery, check marketplace repos, single plugin repos, and `.claude/hooks/`. Track plugin names for deduplication. For global discovery, check `~/.claude/plugins/` (Unix) or `%USERPROFILE%\.claude\plugins\` (Windows). Skip globals that have local dev versions. ## Step 2: Parse Arguments Parse flags and hook names. Read audit logs for each source. ## Step 3: Present Audit Plan Display mode, sources discovered, deduplication status, and audit queue. ## Step 4: Execute Audits For each hook, spawn the `hook-auditor` subagent with source, path, and last audit date. Run in parallel batches of 3-5. Subagents write findings to `.claude/temp/`. The main conversation thread collects results and updates audit logs using its Write/Edit tools. ## Step 4.5: Validate Findings **Unless `--skip-validation` flag is present:** 1. Spawn the `audit-finding-validator` agent with: - `project_root`: The captured project root path - `audit_type`: "hook" - `audit_files`: List of `.claude/temp/audit-*-hook-*.json` file paths 2. Wait for validation to complete 3. Read updated JSON files with validation results 4. Filter out FALSE_POSITIVE findings completely before aggregation 5. Note: Filtered findings are logged to `.claude/temp/audit-filtered-findings.json` **If `--skip-validation` flag is present:** - Skip validation phase entirely (current speed preserved) - Present all findings without filtering - Note in summary: "Validation: Skipped" ## Step 5: Final Summary Report total audited by source, results, and details table. Note that global hook fixes must be applied manually. **Include validation statistics (if validation was performed):** - Validation performed: Yes/No - Findings validated: X - False positives filtered: Y - Verified findings: Z - Unverified findings: W ## Important Notes ### Deduplication Local dev repo plugins take precedence over globally installed versions. Global hooks are read-only - report findings but recommend manual fixes. ### Cross-Platform Paths | Platform | Global Plugins | | --- | --- | | Unix | `~/.claude/plugins/` | | Windows | `%USERPROFILE%\.claude\plugins\` | ## Audit Log Location All audit results are written to `.claude/audit/hooks.md`. Use `/audit-log hooks` to view current audit status. ## Example Usage ### Example 1: Audit All Hooks ```text User: /audit-hooks Claude: Discovering hook sources... ## Audit Plan **Mode**: SMART - Plugin: claude-ecosystem (4 hooks) - Local: .claude/hooks/ (2 hooks) - Deduplicated: claude-ecosystem (global skipped) **Will audit**: 3 hooks [Spawns hook-auditor subagents] ## Audit Complete | Source | Hook | Result | Score | | --- | --- | --- | --- | | plugin | prevent-backup-files | PASS | 100/100 | ``` ### Example 2: Audit Specific Hook ```text User: /audit-hooks plugin:prevent-backup-files Claude: PASS (Score: 100/100) ```
Related in AI Agents
skill-development
IncludedComprehensive meta-skill for creating, managing, validating, auditing, and distributing Claude Code skills and slash commands (unified in v2.1.3+). Provides skill templates, creation workflows, validation patterns, audit checklists, naming conventions, YAML frontmatter guidance, progressive disclosure examples, and best practices lookup. Use when creating new skills, validating existing skills, auditing skill quality, understanding skill architecture, needing skill templates, learning about YAML frontmatter requirements, progressive disclosure patterns, tool restrictions (allowed-tools), skill composition, skill naming conventions, troubleshooting skill activation issues, creating custom slash commands, configuring command frontmatter, using command arguments ($ARGUMENTS, $1, $2), bash execution in commands, file references in commands, command namespacing, plugin commands, MCP slash commands, Skill tool configuration, or deciding between skills vs slash commands. Delegates to docs-management skill for official documentation.
reprompter
IncludedTransform messy prompts into well-structured, effective prompts — single or multi-agent. Use when: "reprompt", "reprompt this", "clean up this prompt", "structure my prompt", rough text needing XML tags and best practices, "reprompter teams", "repromptception", "run with quality", "smart run", "smart agents", multi-agent tasks, audits, parallel work, anything going to agent teams. Don't use when: simple Q&A, pure chat, immediate execution-only tasks. See "Don't Use When" section for details. Outputs: Structured XML/Markdown prompt, quality score (before/after), optional team brief + per-agent sub-prompts, agent team output files. Success criteria: Single mode quality score ≥ 7/10; Repromptception per-agent prompt quality score 8+/10; all required sections present, actionable and specific.
adaptive-compaction
IncludedAdaptive add-on policy and recovery layer that decides WHEN to compact, prune, snapshot, or fork -- replacing fixed-percent auto-compaction across Claude Code, Codex, and MCP-capable hosts. Trigger on auto-compact timing or damage: "when should I compact", "is it safe to compact now or start a fresh session", "auto-compact fires too early/mid-task", "switching to an unrelated task but the window still has space", "context rot", "answers get worse the longer the session runs", "the agent forgot the plan or my decisions after it summarized", "add a layer on top that manages context without changing the agent", raising autoCompactWindow to give the policy room, or installing/tuning a cross-tool compaction policy or PreCompact hook -- even when "compaction" is never said but the problem is context-window pressure or post-summarization memory loss. Do NOT use to summarize a conversation, build RAG, write a summarization prompt (decides WHEN not HOW), or answer max-context-length trivia.
agent-skill-creator
IncludedCreate cross-platform agent skills from workflow descriptions. Activates when users ask to create an agent, automate a repetitive workflow, create a custom skill, or need advanced agent creation. Triggers on phrases like create agent for, automate workflow, create skill for, every day I have to, daily I need to, turn process into agent, need to automate, create a cross-platform skill, validate this skill, export this skill, migrate this skill. Supports single skills, multi-agent suites, transcript processing, template-based creation, interactive configuration, cross-platform export, and spec validation.
llm-wiki
IncludedUse when building or maintaining a persistent personal knowledge base (second brain) in Obsidian where an LLM incrementally ingests sources, updates entity/concept pages, maintains cross-references, and keeps a synthesis current. Triggers include "second brain", "Obsidian wiki", "personal knowledge management", "ingest this paper/article/book", "build a research wiki", "compound knowledge", "Memex", or whenever the user wants knowledge to accumulate across sessions instead of being re-derived by RAG on every query.
skill-master
IncludedAgent Skills authoring, evaluation, and optimization. Create, edit, validate, benchmark, and improve skills following the agentskills.io specification. Use when designing SKILL.md files, structuring skill folders (references, scripts, assets), ingesting external documentation into skills, running trigger evals, benchmarking skill quality, optimizing descriptions, or performing blind A/B comparisons. Keywords: agentskills.io, SKILL.md, skill authoring, eval, benchmark, trigger optimization.