Not in the top 1,000 by GitHub stars
ArunJRK/audit-flow
Claude Code skill for interactive system flow tracing across CODE, API, AUTH, DATA, NETWORK layers. SQLite persistence, Mermaid export, git merge driver.
History
Review weekly changes to SKILL.md before updating. Dates mark the weeks in which we observed each version; checks apply to the recorded commits.
View weekly changes
SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → 6c8e1ae5dfb4
No earlier version was observed for comparison.
15GitHub stars
0stars in 7 days
1skill in this repository
0commits in 30 days
Heat
0.4- Star growth, last 7 daysNot available
- Star growth, last 24 hoursNot available
- Rank movement, last 7 daysNot available
- Commits, last 30 daysNot available
- Accounts asking about it through MCP, last 7 daysNot available
- Hot votes this weekNot available
Heat never changes the order by stars, and sponsorship never touches it. How heat works
Stars over time
30-day change not yet available: not enough history.
Individual skills in this repository
How it works
audit-flow
When your agent uses it
Interactive system flow tracing across CODE, API, AUTH, DATA, NETWORK layers with SQLite persistence and Mermaid export. Use for security audits, compliance documentation, flow tracing, feature ideation, brainstorming, debugging, architecture reviews, or incident post-mortems. Triggers on audit, trace flow, document flow, security review, debug flow, brainstorm, architecture review, post-mortem, incident review.
What it loads into context
Frontmatter
144 tokensAlways available to the agent
SKILL.md
3,747 tokensWhen the skill is activated
Reference documents
8,030 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- ⚠<U+FE0F> MANDATORY ENTRY POINT — Execute Before ANY Other Action
- Organization Principles
- DB-First Discipline
- Interactive Workflow - ALWAYS ASK USER
- Quick Reference
- Semantic Rules for Relations
- Observations vs Flow Steps
- Data Model
- Storage & CLI
- Non-Linear Flows
- Files
- Git Context
- Mermaid Validation
- Diagram Readability Requirements
- Git Workflow — Custom Merge Driver
- Output Quality
- Completion Checklist
- Anti-Patterns
Scripts executed separately
scripts/audit.pysetup.sh
Files
.gitignoreasset130 bytesCOMMANDS.mddoc9,099 bytesEXAMPLES.mddoc9,707 bytesLICENSEasset1,065 bytesREADME.mddoc12,371 bytesSKILL.mdcore14,898 bytesSKILL.mdcore14,898 bytesSKILL.mdcore14,898 bytesSKILL.mdcore14,898 bytesSKILL.mdcore14,898 bytesSKILL.mdcore14,898 bytesSKILL.mdcore14,898 bytesSKILL.mdcore14,898 bytesSKILL.mdcore14,898 bytesSKILL.mdcore14,898 bytesSKILL.mdcore14,898 bytesSKILL.mdcore14,898 bytesSKILL.mdcore14,898 bytesSKILL.mdcore14,898 bytesSKILL.mdcore14,898 bytesSKILL.mdcore14,898 bytesSKILL.mdcore14,898 bytesSKILL.mdcore14,898 bytesSKILL.mdcore14,898 bytesSKILL.mdcore14,898 bytesSKILL.mdcore14,898 bytesSKILL.mdcore14,898 bytesschema.sqlasset6,902 bytesscripts/audit.pyruns60,322 bytessetup.shruns2,567 bytes
Read SKILL.md
## ⚠<U+FE0F> MANDATORY ENTRY POINT — Execute Before ANY Other Action
**Step 1: Read schema.sql**
```bash
# ALWAYS read the schema first to understand tables, constraints, views
cat .claude/skills/audit-flow/schema.sql
```
**Step 2: Check if DB exists — NEVER recreate**
```bash
# Check for existing database
ls -la .audit/audit.db 2>/dev/null && echo "DB EXISTS - DO NOT RECREATE" || echo "No DB - safe to init"
```
Skills included
- audit-flow
Repository facts
- License
- MIT
- Created
- Feb 15, 2026
- Last pushed
- Feb 18, 2026
- Forks
- 4
- Open issues
- 0
- Project activity
- Slowing
Before you install
Network or broad shellAutomated signals, not a guarantee
Checked Nov 6, 2026
Not fully analyzed: some files were too long, unreadable or missing. This never lowers the level.
Show 21 notes
SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedSKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedSKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedSKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedSKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedSKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedSKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedSKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedSKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedSKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedSKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedSKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedSKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedSKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedSKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedSKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedSKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedSKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedSKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedSKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzed
- No broad tool permissions
- 2 dangerous shell commandsin 2 files: EXAMPLES.md:331 SKILL.md:34
- 18 network referencesin 1 file: README.md:1
- No hidden or obfuscated text
- No instruction overrides
- 2 executable scriptsin 2 files: scripts/audit.py:1 setup.sh:1
- 1 reference to secretsin 1 file: EXAMPLES.md:114
- No requests to vote in Hot
Show all 23 signals by file
EXAMPLES.md
README.md
- Network accessline 1
<p align="center"> <img width="160" height="160" src="https://github.com/user-attachments/assets/db98a268-dead-4236-bae7-0f683bf32530" /> - Network accessline 2
<img width="160" height="160" src="https://github.com/user-attachments/assets/db98a268-dead-4236-bae7-0f683bf32530" /> </p> - Network accessline 3
src="https://github.com/user-attachments/assets/db98a268-dead-4236-bae7-0f683bf32530" /> - Network accessline 12
<p align="center"> <a href="https://agentskills.io"> - Network accessline 13
<a href="https://agentskills.io"> - Network accessline 14
<img src="https://img.shields.io/badge/Agent-Skill-blue" /> - Network accessline 15
</a> <img src="https://img.shields.io/badge/status-active-success" /> <img src="https://img.shields.io/badge/license-MIT-black" /> - Network accessline 16
<img src="https://img.shields.io/badge/status-active-success" /> - Network accessline 17
<img src="https://img.shields.io/badge/license-MIT-black" /> - Network accessline 18
<img src="https://img.shields.io/badge/LLM-ready-purple" /> - Network accessline 22
An [Agent Skill](https://agentskills.io) for thinking about systems before (and after) you build them. - Network accessline 24
Tell your AI agent to trace a flow — it walks through your codebase recording every step in SQLite, then exports Mermaid diagrams, Markdown reports, JSON, and YAML. Works with [Claude Code](https://docs.anthropic.com/en/docs/claude-code), [ - Network accessline 85
### Via skills CLI ([skills.sh](https://skills.sh)) - Network accessline 94
# From your project root git clone https://github.com/ArunJRK/audit-flow.git .claude/skills/audit-flow - Network accessline 95
git clone https://github.com/ArunJRK/audit-flow.git .claude/skills/audit-flow - Network accessline 343
- [skills.sh](https://skills.sh) — `npx skills add ArunJRK/audit-flow` - Network accessline 344
- [SkillsMP](https://skillsmp.com) — discovered via GitHub topics - Network accessline 345
- [Agent Skills spec](https://agentskills.io) compatible
SKILL.md
- Dangerous shell operationline 34
| `rm .audit/audit.db` | Destroys audit history |
scripts/audit.py
- Executable scriptline 1
#!/usr/bin/env python3
setup.sh
- Executable scriptline 1
#!/bin/bash
How the signals fit together
Facts from a static read of the files at the pinned commit. They describe what the code does, not why.
Signal confidence: 23 facts
- Access to secrets in code of documentationEXAMPLES.md:114Low confidence
- Dangerous shell operation in prose of documentationEXAMPLES.md:331Low confidence
- Network access in prose of documentationREADME.md:1Low confidence
- Network access in prose of documentationREADME.md:2Low confidence
- Network access in prose of documentationREADME.md:3Low confidence
- Network access in prose of documentationREADME.md:12Low confidence
- Network access in prose of documentationREADME.md:13Low confidence
- Network access in prose of documentationREADME.md:14Low confidence
- Network access in prose of documentationREADME.md:15Low confidence
- Network access in prose of documentationREADME.md:16Low confidence
- Network access in prose of documentationREADME.md:17Low confidence
- Network access in prose of documentationREADME.md:18Low confidence
- Network access in prose of documentationREADME.md:22Low confidence
- Network access in prose of documentationREADME.md:24Low confidence
- Network access in prose of documentationREADME.md:85Low confidence
- Network access in code of documentationREADME.md:94Low confidence
- Network access in code of documentationREADME.md:95Low confidence
- Network access in prose of documentationREADME.md:343Low confidence
- Network access in prose of documentationREADME.md:344Low confidence
- Network access in prose of documentationREADME.md:345Low confidence
- Dangerous shell operation in prose of the SKILL.mdSKILL.md:34Low confidence
- Executable script in code of a file that runsscripts/audit.py:1High confidence
- Executable script in code of a file that runssetup.sh:1High confidence
Works with
| Agent | Status | Evidence | Install to |
|---|---|---|---|
| Claude Code | Compatible | Standard SKILL.md SKILL.md | .claude/skills/<skill-name>/ |
| Codex | Compatible | Standard SKILL.md SKILL.md | .agents/skills/<skill-name>/ |
| Cursor | Compatible | Standard SKILL.md SKILL.md | .cursor/skills/<skill-name>/ |
| Gemini CLI | Compatible | Standard SKILL.md SKILL.md | .gemini/skills/<skill-name>/ |
| GitHub Copilot | Compatible | Standard SKILL.md SKILL.md | .github/skills/<skill-name>/ |
| OpenCode | Compatible | Standard SKILL.md SKILL.md | .opencode/skills/<skill-name>/ |
- Native The repository ships a manifest, folder or frontmatter field for this agent.
- Compatible A standard SKILL.md that this agent can read.
- Unknown No evidence either way.
Derived automatically from paths, manifests and frontmatter. Not tested on each agent.
