xc-audit-options
Checks whether a set of options is well-constructed. Use this whenever the user presents options or choices to evaluate.
What this skill does
# Introduction
## Goal
Surface significant issues in how options are framed that could lead to a poor decision — missing options, unfair characterisations, false constraints.
## Method
Audit the option set using a context-blind agent against framing integrity criteria, then calibrate to surface only concerns that would materially affect the decision.
### Success Criteria
- **No significant omission** — Important option categories aren't missing
- **No dimensional collapse** — The decision space isn't artificially flattened to one axis
- **No description asymmetry** — Options are characterised fairly enough for sound comparison
- **No criteria rigging** — Evaluation criteria don't structurally predetermine the outcome
- **No false exclusivity** — Options aren't presented as mutually exclusive when combining them is viable
- **No scope mismatch** — Options are at comparable levels of abstraction
- **No constraint fabrication** — Constraints limiting the option set are real and relevant
## Part 1: Evaluate
- Think about whether this skill actually applies to the current situation. If it doesn't, skip silently and move on.
- If it does, suggest it to the user conversationally. Briefly explain why you think it's relevant. Wait for confirmation before proceeding.
## Part 2: Workflow
### 1. Identify
- Identify the option set the user has presented. State the decision context and list the options clearly. Use conversation history for context.
### 2. Audit
- Spawn a context-blind agent (Explore task agent, Haiku). Name it: "Audit framing". Use the following prompt:
```
You are a framing integrity auditor. Do NOT read any files, search any directories, or look for additional context. Work ONLY with what is given below.
DECISION CONTEXT: "{context}"
OPTIONS:
{options}
Evaluate this option set against these 7 framing integrity criteria:
1. Omission — are obvious solution categories missing?
2. Dimensional collapse — is the space artificially flattened to one axis?
3. Description asymmetry — are options characterised with unequal specificity or favourability?
4. Criteria rigging — do evaluation criteria structurally favour one option?
5. False exclusivity — could options be combined?
6. Scope mismatch — are options at different levels of abstraction?
7. Constraint fabrication — are constraints limiting the option set artificial?
For each criterion, flag any issues you find. If no issues, say so. Be direct and specific.
```
### 3. Calibrate
- Take the audit results. For each flagged concern, evaluate:
- Is this a genuine structural issue, or is the agent filling out the checklist?
- Would acting on this flag materially improve the decision?
- Is this concern marginal or speculative?
- Drop anything that doesn't survive calibration. Preserve ambitious options — do not flatten toward safe consensus.
## Final output
- If no concerns survive calibration: Proceed without comment. Do not tell the user the audit ran.
- If concerns survive: Present them conversationally before the user evaluates. Do not expose the criteria names or audit process. Use language like:
```
Before you evaluate these options, a couple of things worth noting:
- [concern in plain language]
- [concern in plain language]
Want to adjust the options or proceed as is?
```
## Related skills
- **xc-stress-test-decision** — After the user picks an option, stress-test the decision.
- **xc-clarify-framing** — If the decision context itself is unclear, run xc-clarify-framing first.
Related in Security
mac-ops
IncludedComprehensive macOS workstation operations — diagnose kernel panics, identify failing drives, audit launchd startup items, decode wake reasons, triage TCC permission denials, manage APFS snapshots, recover from no-boot. Use for: Mac is slow, slow bootup, won't boot, kernel panic, kernel_task hot, mds_stores CPU, photoanalysisd, cloudd, login loop, gray screen, sleep wake failure, drive failing, IO errors, APFS snapshots eating space, Time Machine local snapshots, Spotlight indexing, launchd, LaunchAgent, LaunchDaemon, login items, TCC permissions, Full Disk Access, Screen Recording denied, Gatekeeper, quarantine, com.apple.quarantine, app is damaged, helper tool, /Library/PrivilegedHelperTools, pmset, wake reasons, dark wake, sysdiagnose, panic.ips, DiagnosticReports, configuration profile, MDM profile, remote diagnostics over SSH.
a11y-audit
IncludedRun accessibility audits on web projects combining automated scanning (axe-core, Lighthouse) with WCAG 2.1 AA compliance mapping, manual check guidance, and structured reporting. Output is configurable: markdown report only, markdown plus machine-readable JSON, or markdown plus issue tracker integration. Use this skill whenever the user mentions "accessibility audit", "a11y audit", "WCAG audit", "accessibility check", "compliance scan", or asks to check a web project for accessibility issues. Also trigger when the user wants to verify WCAG conformance or map findings to a specific standard (CAN-ASC-6.2, EN 301 549, ADA/AODA).
erpclaw
IncludedAI-native ERP system with self-extending OS. Full accounting, invoicing, inventory, purchasing, tax, billing, HR, payroll, advanced accounting (ASC 606/842, intercompany, consolidation), and financial reporting. 413 actions across 14 domains, 43 expansion modules. Constitutional guardrails, adversarial audit, schema migration. Double-entry GL, immutable audit trail, US GAAP.
assess
IncludedAssesses and rates quality 0-10 across multiple dimensions (correctness, maintainability, security, performance, testability, simplicity) with pros/cons analysis. Compares against project conventions and prior decisions from memory. Produces structured evaluation reports with actionable improvement suggestions. Use when evaluating code, designs, architectures, or comparing alternative approaches.
spring-boot-security-jwt
IncludedProvides JWT authentication and authorization patterns for Spring Boot 3.5.x covering token generation with JJWT, Bearer/cookie authentication, database/OAuth2 integration, and RBAC/permission-based access control using Spring Security 6.x. Use when implementing authentication or authorization in Spring Boot applications.
code-hardcode-audit
IncludedDetect hardcoded values, magic numbers, and leaked secrets. TRIGGERS - hardcode audit, magic numbers, PLR2004, secret scanning.