# Send Audit Code to your agent Hand the extracted package to your coding agent with a concrete install brief instead of figuring it out manually. ## Fast path - Download the package from Yavira. - Extract it into a folder your agent can access. - Paste one of the prompts below and point your agent at the extracted folder. ## Suggested prompts ### New install ```text I downloaded a skill package from Yavira. Read SKILL.md from the extracted folder and install it by following the included instructions. Then review README.md for any prerequisites, environment setup, or post-install checks. Tell me what you changed and call out any manual steps you could not complete. ``` ### Upgrade existing ```text I downloaded an updated skill package from Yavira. Read SKILL.md from the extracted folder, compare it with my current installation, and upgrade it while preserving any custom configuration unless the package docs explicitly say otherwise. Then review README.md for any prerequisites, environment setup, or post-install checks. Summarize what changed and any follow-up checks I should run. ``` ## Machine-readable fields ```json { "schemaVersion": "1.0", "item": { "slug": "agent-skills-audit", "name": "Audit Code", "source": "tencent", "type": "skill", "category": "开发工具", "sourceUrl": "https://clawhub.ai/Swader/agent-skills-audit", "canonicalUrl": "https://clawhub.ai/Swader/agent-skills-audit", "targetPlatform": "OpenClaw" }, "install": { "downloadUrl": "/downloads/agent-skills-audit", "sourceDownloadUrl": "https://wry-manatee-359.convex.site/api/v1/download?slug=agent-skills-audit", "sourcePlatform": "tencent", "targetPlatform": "OpenClaw", "packageFormat": "ZIP package", "primaryDoc": "SKILL.md", "includedAssets": [ "README.md", "SKILL.md", "agents/openai.yaml", "references/audit-framework.md", "scripts/sync-to-agents.sh" ], "downloadMode": "redirect", "sourceHealth": { "source": "tencent", "status": "healthy", "reason": "direct_download_ok", "recommendedAction": "download", "checkedAt": "2026-04-23T16:43:11.935Z", "expiresAt": "2026-04-30T16:43:11.935Z", "httpStatus": 200, "finalUrl": "https://wry-manatee-359.convex.site/api/v1/download?slug=4claw-imageboard", "contentType": "application/zip", "probeMethod": "head", "details": { "probeUrl": "https://wry-manatee-359.convex.site/api/v1/download?slug=4claw-imageboard", "contentDisposition": "attachment; filename=\"4claw-imageboard-1.0.1.zip\"", "redirectLocation": null, "bodySnippet": null }, "scope": "source", "summary": "Source download looks usable.", "detail": "Yavira can redirect you to the upstream package for this source.", "primaryActionLabel": "Download for OpenClaw", "primaryActionHref": "/downloads/agent-skills-audit" }, "validation": { "installChecklist": [ "Use the Yavira download entry.", "Review SKILL.md after the package is downloaded.", "Confirm the extracted package contains the expected setup assets." ], "postInstallChecks": [ "Confirm the extracted package includes the expected docs or setup files.", "Validate the skill or prompts are available in your target agent workspace.", "Capture any manual follow-up steps the agent could not complete." ] } }, "links": { "detailUrl": "https://openagent3.xyz/skills/agent-skills-audit", "downloadUrl": "https://openagent3.xyz/downloads/agent-skills-audit", "agentUrl": "https://openagent3.xyz/skills/agent-skills-audit/agent", "manifestUrl": "https://openagent3.xyz/skills/agent-skills-audit/agent.json", "briefUrl": "https://openagent3.xyz/skills/agent-skills-audit/agent.md" } } ``` ## Documentation ### Overview Run an expert-panel audit with strict sequencing and one unified output document. Produce findings first, sorted by severity, with file references, exploit/perf/flow impact, and actionable fixes. Load references/audit-framework.md before starting the analysis. ### Required Inputs Collect or infer the following: Audit scope: paths, modules, PR diff, or whole repository. Product context: PRD/spec/user stories, trust boundaries, and critical business flows. Runtime context: deployment model, queue/cron/background jobs, traffic profile, data sensitivity, and abuse assumptions. Constraints: timeline, acceptable risk, and preferred remediation style. If product context is missing, state assumptions explicitly and continue. ### Team Roles Use exactly these roles: Security expert Performance expert UX expert DX expert Edge case master Tie-breaker team lead The tie-breaker lead resolves conflicts, prioritizes issues, and produces the final single report. ### Workflow Follow this sequence every time: Build Context Read code + product flows. Identify assets, entry points, high-risk operations, privileged actions, external dependencies, and "failure hurts" journeys. Build Invariant Coverage Matrix Before specialist pass 1, map critical invariants to every mutating path (HTTP routes, webhooks, async jobs, scripts): Data-link invariants: multi-table relationships that must remain consistent. Auth lifecycle invariants: disable/revoke semantics for sessions/tokens/API keys. Input/transport invariants: validation, content-type policy, body-size/parse behavior. Shape invariants: trees/graphs must reject cycles where applicable. Treat missing parity across equivalent paths as a finding candidate. Pass 1 Specialist Reviews Run role-specific analysis in this order: Security Performance UX DX Edge case master Capture findings using the schema in references/audit-framework.md. Tie-Breaker Reconciliation Resolve disagreements: Decide whether contested items are true issues. Set severity and confidence. Remove duplicates and merge overlapping findings. Cross-Review Pass 2 After edge-case findings, rerun specialists: Security/Performance/UX/DX reassess prior findings and new edge-triggered scenarios. Edge case master performs a final pass on residual risk after proposed mitigations. Final Report Publish one document from the tie-breaker lead with: Findings first (ordered by severity, then blast radius, then exploitability). Open questions/assumptions. Remediation plan with priority, owner type, and verification tests. Short executive summary at the end. ### Quality Bar Enforce these requirements: Use concrete evidence with file references and line numbers where available. Include reproduction steps for security/performance/edge findings when feasible. Prefer actionable fixes over abstract advice. Separate confirmed defects from speculative risks. Mark confidence for each finding. Run a cross-route consistency sweep: equivalent endpoints/jobs must enforce equivalent invariants. For each High/Critical finding, include at least one focused regression test/check. ### Safety and Policy Guardrails Apply these guardrails while auditing: Do not provide operational abuse instructions or exploit weaponization details. Evaluate manipulative UX patterns as legal/trust/reputation risk, not as recommended growth tactics. Prioritize user safety, system integrity, and maintainable engineering outcomes. ### Output Format Follow this response structure: Findings List only validated issues. Use the finding schema in references/audit-framework.md. Open Questions / Assumptions State missing context that could change priority or validity. Change Summary Summarize high-impact remediation themes in a few lines. Suggested Verification List focused tests/checks to confirm each major fix. ### Runtime Heuristics When the target stack is Bun + SQLite, apply the runtime-specific checklist in references/audit-framework.md (Runtime-Specific Heuristics (Bun + SQLite)) before finalizing findings. ## Trust - Source: tencent - Verification: Indexed source record - Publisher: Swader - Version: 0.1.0 ## Source health - Status: healthy - Source download looks usable. - Yavira can redirect you to the upstream package for this source. - Health scope: source - Reason: direct_download_ok - Checked at: 2026-04-23T16:43:11.935Z - Expires at: 2026-04-30T16:43:11.935Z - Recommended action: Download for OpenClaw ## Links - [Detail page](https://openagent3.xyz/skills/agent-skills-audit) - [Send to Agent page](https://openagent3.xyz/skills/agent-skills-audit/agent) - [JSON manifest](https://openagent3.xyz/skills/agent-skills-audit/agent.json) - [Markdown brief](https://openagent3.xyz/skills/agent-skills-audit/agent.md) - [Download page](https://openagent3.xyz/downloads/agent-skills-audit)