audit-repo
Audit the current repository against RAE standards. Use when the user says "audit repo", "check repo standards", "sync with RAE", "check for drift", "compare against template", or when you want to verify a repo follows RAE conventions. Compares pyproject.toml, CLAUDE.md, ruff config, pytest/coverage config, and dev dependencies against the canonical RAE template.
What this skill does
## Overview
Compare the current repository's configuration against the canonical RAE template
(`templates/pyproject.toml`) and report discrepancies. For major structural differences
(e.g., no `src/` layout in an established repo), ask the user before proposing changes.
**This skill does NOT automatically fix everything.** It reports what it finds, fixes
trivial gaps (missing ruff subsections, missing dev deps), and asks about anything
that would be disruptive to change.
## Steps
### 1. Read the Canonical Template
Read `templates/pyproject.toml` from the RAE plugin directory to get the current
source of truth. This template defines the expected configuration for:
- Build system (hatchling)
- Python version constraint (>=3.11)
- Dev dependencies (pytest, pytest-cov, ruff)
- Ruff config (line-length, lint rules, isort, format)
- Pytest config (testpaths, pythonpath, addopts, coverage)
- Coverage config (fail_under = 80)
### 2. Read the Current Repo
Read the current repository's:
- `pyproject.toml` (required — if missing, this is a scaffold-repo situation, not an audit)
- `CLAUDE.md` (optional but recommended)
- Directory structure (src/ vs flat layout)
### 3. Compare and Categorize
Compare each section and categorize discrepancies:
**Auto-fixable (apply without asking):**
- Missing `[tool.ruff.lint.isort]` section
- Missing `[tool.ruff.format]` section
- Missing `[tool.ruff]` `src` key
- Missing ruff lint rules that are in the template
- Missing `[tool.pytest.ini_options]` section
- Missing `[tool.coverage.run]` or `[tool.coverage.report]` sections
**Ask the user first:**
- No `src/` layout (established repos may have good reasons)
- Dev dependencies missing from `[project.optional-dependencies]` when they're
installed some other way (e.g., devcontainer, system-level)
- `line-length` differs from 120
- Extra `ignore` rules not in the template (may be project-specific, e.g., F722 for jaxtyping)
- Missing CLAUDE.md (offer to create one)
- Build system differs from hatchling
**Informational only (report but don't change):**
- No `.github/` CI workflows
- No `.pre-commit-config.yaml` (RAE does not require this)
- Coverage threshold differs from 80 (may be intentionally lower for legacy repos)
### 4. Report Findings
Present a summary table:
```
## Audit Results: {repo_name}
### Aligned with RAE
- [x] ruff line-length = 120
- [x] Python >= 3.11
- ...
### Gaps Found
| Gap | Category | Action |
|-----|----------|--------|
| Missing [tool.ruff.format] | Auto-fix | Will add |
| Missing pytest config | Auto-fix | Will add |
| No src/ layout | Ask user | Uses body_models/ directly |
| Extra ignore F722 | Informational | Needed for jaxtyping |
### Recommended additions to CLAUDE.md
- Document F722 exception and why it's needed
- ...
```
### 5. Apply Fixes
- Apply all auto-fixable changes to `pyproject.toml`
- For each "ask user" item, present the discrepancy and ask whether to fix or document as intentional
- Intentional deviations should be noted in the repo's CLAUDE.md under a `## RAE Deviations` section so future audits understand why
### 6. Verify
After applying fixes:
```bash
ruff format --check .
ruff check .
```
Report any issues from the verification step.
## Important Notes
- The canonical source of truth is always `templates/pyproject.toml` in the RAE plugin
- This skill does NOT enforce `src/` layout changes on established repos — that's too disruptive
- Extra `ignore` rules are often legitimate (F722 for jaxtyping, etc.) — ask, don't remove
- The goal is convergence over time, not instant compliance
Related in Security
mac-ops
IncludedComprehensive macOS workstation operations — diagnose kernel panics, identify failing drives, audit launchd startup items, decode wake reasons, triage TCC permission denials, manage APFS snapshots, recover from no-boot. Use for: Mac is slow, slow bootup, won't boot, kernel panic, kernel_task hot, mds_stores CPU, photoanalysisd, cloudd, login loop, gray screen, sleep wake failure, drive failing, IO errors, APFS snapshots eating space, Time Machine local snapshots, Spotlight indexing, launchd, LaunchAgent, LaunchDaemon, login items, TCC permissions, Full Disk Access, Screen Recording denied, Gatekeeper, quarantine, com.apple.quarantine, app is damaged, helper tool, /Library/PrivilegedHelperTools, pmset, wake reasons, dark wake, sysdiagnose, panic.ips, DiagnosticReports, configuration profile, MDM profile, remote diagnostics over SSH.
a11y-audit
IncludedRun accessibility audits on web projects combining automated scanning (axe-core, Lighthouse) with WCAG 2.1 AA compliance mapping, manual check guidance, and structured reporting. Output is configurable: markdown report only, markdown plus machine-readable JSON, or markdown plus issue tracker integration. Use this skill whenever the user mentions "accessibility audit", "a11y audit", "WCAG audit", "accessibility check", "compliance scan", or asks to check a web project for accessibility issues. Also trigger when the user wants to verify WCAG conformance or map findings to a specific standard (CAN-ASC-6.2, EN 301 549, ADA/AODA).
erpclaw
IncludedAI-native ERP system with self-extending OS. Full accounting, invoicing, inventory, purchasing, tax, billing, HR, payroll, advanced accounting (ASC 606/842, intercompany, consolidation), and financial reporting. 413 actions across 14 domains, 43 expansion modules. Constitutional guardrails, adversarial audit, schema migration. Double-entry GL, immutable audit trail, US GAAP.
assess
IncludedAssesses and rates quality 0-10 across multiple dimensions (correctness, maintainability, security, performance, testability, simplicity) with pros/cons analysis. Compares against project conventions and prior decisions from memory. Produces structured evaluation reports with actionable improvement suggestions. Use when evaluating code, designs, architectures, or comparing alternative approaches.
spring-boot-security-jwt
IncludedProvides JWT authentication and authorization patterns for Spring Boot 3.5.x covering token generation with JJWT, Bearer/cookie authentication, database/OAuth2 integration, and RBAC/permission-based access control using Spring Security 6.x. Use when implementing authentication or authorization in Spring Boot applications.
code-hardcode-audit
IncludedDetect hardcoded values, magic numbers, and leaked secrets. TRIGGERS - hardcode audit, magic numbers, PLR2004, secret scanning.