\r \r

Audit System Skill\r

\r Perform structured audits and generate actionable reports with clear severity, evidence, and fixes.\r \r This is an instruction-only skill.\r It does not perform external verification, blockchain auditing, or legal certification.\r \r ---\r \r

Quick Reference\r

\r | Situation | Action |\r |----------|--------|\r | Code not working | Run Code Audit |\r | Workflow failing | Run Workflow Audit |\r | UX feels bad | Run Product Audit |\r | Prompt/AI unstable | Run Prompt Audit |\r | Before deploy | Run Full Audit |\r | Repeated bugs | Focus on root-cause analysis |\r \r ---\r \r

Audit Types\r

\r

1. Code Audit\r

Check:\r

• logic errors\r
• missing validation\r
• security risks\r
• bad patterns\r
• performance issues\r \r ---\r \r

2. Workflow Audit\r

Check:\r

• broken steps\r
• missing retries\r
• failure points\r
• unnecessary complexity\r
• automation gaps\r \r ---\r \r

3. Product Audit\r

Check:\r

• onboarding friction\r
• unclear UX\r
• conversion blockers\r
• trust issues\r
• missing features\r \r ---\r \r

4. Prompt / Agent Audit\r

Check:\r

• unclear instructions\r
• conflicting rules\r
• missing constraints\r
• unstable outputs\r
• over-autonomy risks\r \r ---\r \r

Audit Process\r

\r

Step 1 — Define Scope\r

Identify:\r

• what is being audited\r
• expected behavior\r
• actual behavior\r
• available data\r \r ---\r \r

Step 2 — Inspect\r

Analyze inputs:\r

• code\r
• prompts\r
• configs\r
• logs\r
• workflows\r \r Look for:\r
• inconsistencies\r
• missing logic\r
• unclear flow\r
• hidden risks\r \r ---\r \r

Step 3 — Detect Issues\r

\r For each issue:\r

• describe clearly\r
• link to evidence\r
• explain impact\r \r ---\r \r

Step 4 — Classify Severity\r

\r

• Critical → breaks system / risk of loss\r
• High → likely failure\r
• Medium → important weakness\r
• Low → improvement\r \r ---\r \r

Step 5 — Recommend Fixes\r

\r For each issue:\r

• what to fix\r
• why it matters\r
• exact fix\r
• quick workaround\r \r ---\r \r

Step 6 — Prioritize\r

\r Always output:\r

• top 3 issues\r
• quick wins\r
• long-term fixes\r \r ---\r \r

Output Format\r

\r

Audit Report\r

\r

Scope\r

• Target:\r
• Type:\r
• Evidence:\r
• Limitations:\r \r

Findings\r

\r

[Severity] Title\r

• Area:\r
• Problem:\r
• Evidence:\r
• Impact:\r
• Fix:\r \r

Priority Actions\r

1. ...\r
2. ...\r
3. ...\r \r

Quick Wins\r

• ...\r
• ...\r \r

Long-Term Improvements\r

• ...\r \r

Open Questions\r

• ...\r \r ---\r \r

Behavior Rules\r

\r

• Be precise, not vague\r
• Do not invent missing data\r
• Do not exaggerate severity\r
• Do not claim certification\r
• Focus on actionable fixes\r \r ---\r \r

When NOT to use this skill\r

\r Do NOT use for:\r

• legal certification\r
• financial compliance guarantees\r
• blockchain verification\r
• cryptographic proof generation\r \r Only analyze what is provided.\r \r ---\r \r

Upgrade Path (Advanced)\r

\r If repeated issues appear:\r

• suggest system redesign\r
• suggest automation improvements\r
• suggest monitoring/logging additions