audit-workflow
Phase completion verification workflow - triggers brutal audits after phase completion
Install / Use
npx skills add beettlle/pi-spineInstalls into whichever agent you are using.
Cursor Rules
Cursor IDE rules (v2)
Quality Score
Category
AutomationSupported Platforms
Tags
Our assessment of audit-workflow
audit-workflow scores 56/100 on our quality scale, 2743rd of 2,863 Automation skills we index.
Its Cursor Rules is 4.9 KB long, well organised into 14 sections and no code examples: a solid amount of guidance for an agent.
It has no GitHub stars yet, so there is no community track record; judge it on its content.
Maintenance, license and trust
- We could not determine when the repository was last updated.
- Our last check on 2026-10-18 found the source still online.
- No license is declared. By default that means all rights are reserved: you can read it, but reusing or redistributing it is not clearly permitted. Ask the author before building on it commercially.
- Its trust signals score 68/100, with 3 cautions from licensing, adoption, age or documentation. These come from repository metadata, not a code audit — read the skill file before letting an agent act on it.
Safety scan
No issues foundOur scan of the whole file found no instruction hijacking, hidden characters, credential access, data exfiltration or destructive commands. An AI review of the same text found nothing harmful.
AI review by kimi-k2.7-code on 2026-09-24. Automated pattern scan on 2026-09-24. It catches known dangerous patterns, not every risk — read a skill before letting an agent act on it.
audit-workflow compared with similar skills
All 4 of these similar skills score higher than audit-workflow; compare them before choosing.
| Skill | Score | Stars | Updated | Format |
|---|---|---|---|---|
| audit-workflow (this skill)by beettlle | 56 | 0 | — | Cursor Rules |
| Agent-Reachby Panniantong | 100 | 109.2k | today | CLAUDE.md |
| Scraplingby D4Vinci | 100 | 97.9k | today | MCP Server |
| rufloby ruvnet | 100 | 81.0k | today | MCP Server |
| openclawby thedotmack | 100 | 107.6k | 5d ago | SKILL.md |
Frequently asked questions
- How do I install audit-workflow?
- Run
npx skills add beettlle/pi-spine. The install tabs above show the steps for each supported agent. - Which AI agents does audit-workflow work with?
- It is written for Cursor, as a Cursor Rules file. Other agents that read the same format can often use it too.
- Is audit-workflow safe to use?
- Our scan of the whole file found no instruction hijacking, hidden characters, credential access, data exfiltration or destructive commands. An AI review of the same text found nothing harmful. It declares no license and scores 68/100 on trust signals. Skills are instructions an agent will follow, so read the file before installing it and do not approve commands you do not understand.
- Is audit-workflow still maintained?
- We could not determine when the repository was last updated.
Skill content
View source on GitHubdescription: "Phase completion verification workflow - triggers brutal audits after phase completion" globs: [] alwaysApply: false
Phase Completion Audit Workflow
This rule provides guidance for running brutal audits after completing a development phase or milestone.
When to Run Audits
Apply this workflow when:
- The user mentions completing a "Phase" or "Milestone"
- The user asks to "verify phase completion"
- The user wants to ensure code quality before proceeding to the next phase
- Code quality concerns arise during development
Available Audit Workflows
The repository includes comprehensive brutal audit workflows:
Swift/iOS Projects (Swift 5.9)
- File:
swift-5-9-brutal-audit.mdc - Use when: Swift 5.9 language mode (platform minimum is project-defined)
- Covers: Architectural patterns, concurrency, performance, test quality, Swift 6 readiness, UI compliance
Swift/iOS Projects (Swift 6)
- File:
swift-6-brutal-audit.mdc - Use when: Swift 6 language mode (platform minimum is project-defined)
- Covers: Architectural patterns, strict concurrency compliance, performance, test quality, UI compliance
Python Projects
- File:
python-3-brutal-audit.mdc - Use when: Working on Python 3.13+ projects
- Covers: Async/await patterns, layer boundaries, performance, test quality, type safety, web compliance
Java Projects
- File:
java-brutal-audit.mdc - Use when: Working on Java 17 or Java 21 LTS projects
- Covers: Concurrency (ExecutorService/Virtual Threads), layer boundaries, Effective Java patterns, Optional/Records, test quality, JVM tuning
Go Projects
- File:
go-1-21-brutal-audit.mdc - Use when: Working on Go 1.21+ projects
- Covers: Effective Go, concurrency, testing, structure
JavaScript/TypeScript Projects
- File:
javascript-3-brutal-audit.mdc - Use when: Working on JavaScript/TypeScript projects
- Covers: Modern ES, tooling, testing
Rust Projects
- File:
rust-brutal-audit.mdc - Use when: Working on Rust (edition 2021 or 2024) projects
- Covers: Error handling, ownership, async/concurrency, testing, API guidelines, unsafe
Workflow Steps
-
Identify the project type (Swift/iOS, Python, Java, Go, JavaScript/TypeScript, or Rust)
-
Invoke the appropriate audit by mentioning:
- "run the audit"
- "check for anti-patterns"
- "verify phase completion"
- "run the Swift audit", "run the Python audit", "run the Java audit", "run the Go audit", "run the Rust audit", or "run the JavaScript audit"
-
Review the audit results — output depends on scope:
Full phase-completion audit (default when the user says "run the audit" or "verify phase completion" without naming a section):
- Per-violation report: severity (CRITICAL/HIGH/MEDIUM/LOW), file, lines, recommended fix, effort estimate
- Section G from the invoked language audit: cleanliness score table (G1), Top 10 files (G2), technical debt tracker (G3)
- Exit line:
Ready for Phase [X+1]? YES/NO
Section-specific audit (e.g. "Run Section A"):
- Output only for the requested section(s)
- Section G deliverables are not required unless Section G is explicitly requested or a full audit is run
All
*-brutal-audit.mdcfiles share Section G structure; see the invoked audit file for the exact template. -
Address blockers — before proceeding to the next phase (applies to full audits, not sectional spot-checks):
- Fix all CRITICAL and HIGH severity issues
- Document any acceptable technical debt
- Ensure the full audit concludes with "Ready for Phase [X+1]? YES"
Integration with Development Standards
These audits complement the always-on rules:
- Always-on rules (
general-llm-anti-patterns.mdc, language-specific standards) prevent issues during development - Brutal audits provide deep, milestone-based validation after phase completion
Both work together to ensure code quality throughout the development lifecycle.
Best Practices
- Run audits after each major phase completion
- Don't skip audits even if code "looks good"
- Use audit results to track technical debt over time
- Address CRITICAL issues before proceeding to next phase
- Keep audit reports for regression tracking
See Also
RULE_COMPOSITION.md- Standard section order and rule structureswift-5-9-brutal-audit.mdc- Swift 5.9/iOS comprehensive auditswift-6-brutal-audit.mdc- Swift 6/iOS comprehensive auditpython-3-brutal-audit.mdc- Python comprehensive auditjava-brutal-audit.mdc- Java 17/21 comprehensive auditgo-1-21-brutal-audit.mdc- Go 1.21+ comprehensive auditjavascript-3-brutal-audit.mdc- JavaScript/TypeScript comprehensive auditrust-brutal-audit.mdc- Rust comprehensive auditcritical-rules-quick-reference.mdc- Quick reference for when to run audits- Language-specific development standards files for ongoing guidance
Related Skills
Agent-Reach
109.2kGive your AI agent eyes to see the entire internet. Read & search Twitter, Reddit, YouTube, GitHub, Bilibili, XiaoHongShu — one CLI, zero API fees.
Scrapling
97.9k🕷️ The BEST Web Scraping framework that handles everything from a single request to a full-scale crawl! Don't be shy, join here: https://discord.gg/EMgGbDceNQ and follow here for daily tips and tricks: https://x.com/Scrapling_dev
ruflo
81.0k🌊 The original agent harness. Deploy intelligent multi-player swarms, coordinate autonomous workflows, and build conversational AI systems. Features adaptive memory, self-learning intelligence, federation, vector RAG integration, and native Claude Code / Codex / Hermes and many more Integrated
openclaw
107.6kThis guide walks through setting up the claude-mem plugin on an OpenClaw gateway. By the end, your agents will have persistent memory across sessions via system prompt context injection, and optionally a real-time observation feed streaming to a messaging channel.
Trust signals
From repository metadata: license, adoption, age and documentation. Not a code audit — see the Safety scan above for what the skill file itself contains.
