← 返回 Skills 市场
mededdahby

audit system

作者 Mededdahby · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ✓ 安全检测通过
218
总下载
1
收藏
1
当前安装
1
版本数
在 OpenClaw 中安装
/install audit-system
功能描述
Perform structured audits on code, workflows, prompts, and products. Use when: (1) Something is not working as expected, (2) User asks for review or feedback...
使用说明 (SKILL.md)

\r \r

Audit System Skill\r

\r Perform structured audits and generate actionable reports with clear severity, evidence, and fixes.\r \r This is an instruction-only skill.\r It does not perform external verification, blockchain auditing, or legal certification.\r \r ---\r \r

Quick Reference\r

\r | Situation | Action |\r |----------|--------|\r | Code not working | Run Code Audit |\r | Workflow failing | Run Workflow Audit |\r | UX feels bad | Run Product Audit |\r | Prompt/AI unstable | Run Prompt Audit |\r | Before deploy | Run Full Audit |\r | Repeated bugs | Focus on root-cause analysis |\r \r ---\r \r

Audit Types\r

\r

1. Code Audit\r

Check:\r

  • logic errors\r
  • missing validation\r
  • security risks\r
  • bad patterns\r
  • performance issues\r \r ---\r \r

2. Workflow Audit\r

Check:\r

  • broken steps\r
  • missing retries\r
  • failure points\r
  • unnecessary complexity\r
  • automation gaps\r \r ---\r \r

3. Product Audit\r

Check:\r

  • onboarding friction\r
  • unclear UX\r
  • conversion blockers\r
  • trust issues\r
  • missing features\r \r ---\r \r

4. Prompt / Agent Audit\r

Check:\r

  • unclear instructions\r
  • conflicting rules\r
  • missing constraints\r
  • unstable outputs\r
  • over-autonomy risks\r \r ---\r \r

Audit Process\r

\r

Step 1 — Define Scope\r

Identify:\r

  • what is being audited\r
  • expected behavior\r
  • actual behavior\r
  • available data\r \r ---\r \r

Step 2 — Inspect\r

Analyze inputs:\r

  • code\r
  • prompts\r
  • configs\r
  • logs\r
  • workflows\r \r Look for:\r
  • inconsistencies\r
  • missing logic\r
  • unclear flow\r
  • hidden risks\r \r ---\r \r

Step 3 — Detect Issues\r

\r For each issue:\r

  • describe clearly\r
  • link to evidence\r
  • explain impact\r \r ---\r \r

Step 4 — Classify Severity\r

\r

  • Critical → breaks system / risk of loss\r
  • High → likely failure\r
  • Medium → important weakness\r
  • Low → improvement\r \r ---\r \r

Step 5 — Recommend Fixes\r

\r For each issue:\r

  • what to fix\r
  • why it matters\r
  • exact fix\r
  • quick workaround\r \r ---\r \r

Step 6 — Prioritize\r

\r Always output:\r

  • top 3 issues\r
  • quick wins\r
  • long-term fixes\r \r ---\r \r

Output Format\r

\r

Audit Report\r

\r

Scope\r

  • Target:\r
  • Type:\r
  • Evidence:\r
  • Limitations:\r \r

Findings\r

\r

[Severity] Title\r

  • Area:\r
  • Problem:\r
  • Evidence:\r
  • Impact:\r
  • Fix:\r \r

Priority Actions\r

  1. ...\r
  2. ...\r
  3. ...\r \r

Quick Wins\r

  • ...\r
  • ...\r \r

Long-Term Improvements\r

  • ...\r \r

Open Questions\r

  • ...\r \r ---\r \r

Behavior Rules\r

\r

  • Be precise, not vague\r
  • Do not invent missing data\r
  • Do not exaggerate severity\r
  • Do not claim certification\r
  • Focus on actionable fixes\r \r ---\r \r

When NOT to use this skill\r

\r Do NOT use for:\r

  • legal certification\r
  • financial compliance guarantees\r
  • blockchain verification\r
  • cryptographic proof generation\r \r Only analyze what is provided.\r \r ---\r \r

Upgrade Path (Advanced)\r

\r If repeated issues appear:\r

  • suggest system redesign\r
  • suggest automation improvements\r
  • suggest monitoring/logging additions
安全使用建议
This is an instruction-only audit template and appears internally consistent. Before using it: (1) Do not paste sensitive credentials or personal data into audits — the skill will analyze whatever you provide. (2) Treat the output as advisory: verify suggested fixes (especially security or production changes) before applying them. (3) If you need the agent to analyze logs or systems, provide only the minimal, redacted excerpts required. (4) The skill explicitly excludes legal/financial/blockchain certification — don’t rely on it for compliance or formal audits.
功能分析
Type: OpenClaw Skill Name: audit-system Version: 1.0.0 The 'audit-system' skill is a purely instructional bundle designed to guide an AI agent through structured auditing processes for code, workflows, and products. It contains no executable code, scripts, or network-enabled components. The instructions in SKILL.md are focused on reporting and analysis logic, and there is no evidence of prompt injection, data exfiltration, or malicious intent.
能力评估
✓ Purpose & Capability
Name, description, and SKILL.md align: the skill is a general audit template that instructs the agent how to review code, prompts, workflows, and products. It does not request unrelated capabilities, binaries, or credentials.
✓ Instruction Scope
Instructions are scoped to analysing provided artifacts (code, prompts, configs, logs, workflows) and explicitly state 'Only analyze what is provided.' There are no directives to access system files, environment variables, or external endpoints.
✓ Install Mechanism
No install spec and no code files — this is instruction-only, so nothing is written to disk or fetched at install time.
✓ Credentials
The skill declares no required environment variables, credentials, or config paths. Nothing in the instructions attempts to access secrets or unrelated services.
✓ Persistence & Privilege
always:false and default invocation settings; the skill does not request persistent presence or modify agent/system configuration.
如何使用
  1. 确保已安装 OpenClaw（本地或 Docker 部署）
  2. 在对话框中输入安装命令：/install audit-system
  3. 安装完成后，直接呼叫该 Skill 的名称或使用 /audit-system 触发
  4. 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release of audit-system skill. - Enables structured audits for code, workflows, prompts, and products. - Provides clear audit process: define scope, inspect, detect issues, classify severity, recommend fixes, and prioritize. - Outlines different audit types with specific guidance for each. - Standardized output format for actionable reports. - Includes clear behavior rules and limitations for safe, focused usage.
元数据
Slug audit-system
版本 1.0.0
许可证 MIT-0
累计安装 1
当前安装数 1
历史版本数 1
常见问题

audit system 是什么？

Perform structured audits on code, workflows, prompts, and products. Use when: (1) Something is not working as expected, (2) User asks for review or feedback... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 218 次。

如何安装 audit system？

在 OpenClaw 或 Claude Code 对话框中运行命令「/install audit-system」即可一键安装，无需额外配置。

audit system 是免费的吗？

是的，audit system 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。

audit system 支持哪些平台？

audit system 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。

谁开发了 audit system？

由 Mededdahby（@mededdahby）开发并维护，当前版本 v1.0.0。

推荐 Skills
self-improving agent
Captures learnings, errors, and corrections to enable continuous improvement. Use when: (1) A command or operation fails unexpectedly, (2) User corrects Clau...
⬇ 463283 · by pskoett
Skill Vetter
Security-first skill vetting for AI agents. Use before installing any skill from ClawdHub, GitHub, or other sources. Checks for red flags, permission scope, and suspicious patterns.
⬇ 259410 · by spclaudehome
Polymarket
Query Polymarket prediction markets. Check odds, find trending markets, search events, track price movements.
⬇ 232503 · by joelchance
Self-Improving + Proactive Agent
Self-reflection + Self-criticism + Self-learning + Self-organizing memory. Agent evaluates its own work, catches mistakes, and improves permanently. Use when...
⬇ 200423 · by ivangdavila
Github
Interact with GitHub using the `gh` CLI. Use `gh issue`, `gh pr`, `gh run`, and `gh api` for issues, PRs, CI runs, and advanced queries.
⬇ 191115 · by steipete
ontology
Typed knowledge graph for structured agent memory and composable skills. Use when creating/querying entities (Person, Project, Task, Event, Document), linkin...
⬇ 190156 · by oswalpalash

💬 留言讨论