Automated summary

Runs a read-only quality audit that compares the implementation against KnowzCode specifications and reports completion percentages per NodeID and overall.

Strengths

Strictly read-only: no source files are modified during the audit
Computes completion from the VERIFY statements in specs, both per NodeID and overall
Offers four standalone audit modes: spec, architecture, security (OWASP top 10) and integration
Surfaces gaps such as missing features, incomplete criteria and untested paths, with a risk assessment for each

Limitations

Tightly coupled to the KnowzCode layout (knowzcode/specs, knowzcode/journal, knowzcode_loop.md), so it is unusable outside that framework
Stops after presenting results and does not fix the gaps or propose a remediation plan
Score accuracy depends entirely on how well the VERIFY statements were written in the specs

When to use it

Reach for it before a code review or a production release, to confirm the implementation actually satisfies every requirement captured in the specs.

When not to use it

Avoid it when you want the gaps fixed, or on a project that does not follow the KnowzCode framework.

Security analysis

Safe

Quality score82/100

The skill explicitly performs a READ-ONLY audit and instructs the agent to read local KnowzCode files, compare specs, and report gaps. It contains no destructive commands, exfiltration, obfuscation, network calls, or safety-disabling instructions.

No concerns found

How this analysis is made

Examples

Full spec coverage audit

Run /knowzcode:audit on the whole repo and give me the completion percentage per NodeID with the full list of gaps.

Security-focused audit

Do a security audit of our authentication flow: OWASP top 10, input validation, and auth/session handling.

Integration and contract check

Audit the integration layer — compare our API contracts against the specs and flag dependency health risks.

name: knowzcode-audit description: Read-only quality audit comparing implementation against specs. Triggers on audit requests, quality checks, security reviews, and compliance verification.

/knowzcode:audit — Quality Audit

Name: KnowzCode Read-Only Quality Audit
Author: Skills Guide Bot

Perform a READ-ONLY audit comparing implementation against specs.

Instructions

Read these files:

knowzcode/knowzcode_loop.md — Phase 2B methodology
knowzcode/journal/ — in-flight WorkGroups are folders under knowzcode/journal/*/*/ with no arc-completion or workgroup-abandoned shard

CRITICAL: This is a READ-ONLY audit. Do NOT modify source files.

Compare implementation against all VERIFY statements in specs from knowzcode/specs/
Calculate completion percentage per NodeID and overall
Identify gaps: missing features, incomplete criteria, untested paths
Check for security concerns
Assess risk for any gaps found

Standalone Audit Types

spec: Audit spec quality and VERIFY statement coverage
architecture: Compare architecture doc against codebase
security: OWASP top 10, input validation, auth flows
integration: API contracts, dependency health

STOP — Present audit results with completion percentage and gap list.

From the file to a first result

The download contains exactly the content displayed on this page. This copy may differ from the latest version in the source repository.

View the source and supporting files

This download contains SKILL.md only. Any scripts, references, templates and dependencies are not included. Get the required files from the source, preserving their directory structure, before continuing.

1. Download the file

Download SKILL.md

From the root of a test project, save the file as .skill-downloads/knowzcode-read-only-quality-audit-mtz9jr5r/SKILL.md, or use the command below. This folder is for inspecting the skill before installation.

Command for macOS/Linux or WSL: requires a POSIX shell and curl. On Windows without WSL, use the download button and create the folder manually.

mkdir -p '.skill-downloads/knowzcode-read-only-quality-audit-mtz9jr5r' && curl --fail --show-error --location 'https://skills-guides.com/api/skills/knowzcode-read-only-quality-audit-mtz9jr5r/download' --output '.skill-downloads/knowzcode-read-only-quality-audit-mtz9jr5r/SKILL.md.part' && mv '.skill-downloads/knowzcode-read-only-quality-audit-mtz9jr5r/SKILL.md.part' '.skill-downloads/knowzcode-read-only-quality-audit-mtz9jr5r/SKILL.md'

2. Check prerequisites

Read SKILL.md before using it. If it references scripts or external services, inspect them and prepare the required access in your test environment.

No recognized prerequisites section in this file. This does not mean it is self-contained: libraries, tools and access requirements may be mentioned elsewhere in the content or source repository.

The platforms on this page are catalog indications. The paths below follow tool documentation; they do not prove this skill has been run in those tools. No minimum tool version is confirmed for this listing.

3. Load the skill

After inspection, copy the complete folder into your project using one of the commands below, then open a new tool session. The command stops if a folder with the same name already exists: compare the files before replacing it.

Claude Code

test -f '.skill-downloads/knowzcode-read-only-quality-audit-mtz9jr5r/SKILL.md' && test -s '.skill-downloads/knowzcode-read-only-quality-audit-mtz9jr5r/SKILL.md' && mkdir -p '.claude/skills' && test ! -e '.claude/skills/knowzcode-audit' && cp -R '.skill-downloads/knowzcode-read-only-quality-audit-mtz9jr5r' '.claude/skills/knowzcode-audit'

OpenSkills

OpenSkills must already be installed. The local install/read procedure is checked with OpenSkills 1.5.0, which requires Node.js ≥ 20.6.0. Catalog slugs are not resolved automatically.

Official OpenSkills installation

openskills install './.skill-downloads/knowzcode-read-only-quality-audit-mtz9jr5r'

openskills read 'knowzcode-read-only-quality-audit-mtz9jr5r'

Reading should display the installed file content and its base directory. It does not run the skill or install its dependencies.

For an agent that reads AGENTS.md, then sync the index. This command changes AGENTS.md: review the diff before using it.

openskills sync

Manual method or another tool: attach SKILL.md to a conversation, or open it in an agent that can read files. Include any required supporting resources. No universal folder is recognized by every tool.

4. Try a first task

Use a short, synthetic input: an API endpoint, a small document or an interface brief. In a new conversation, attach the file or give the agent its path, then adapt this request:

Read .skill-downloads/knowzcode-read-only-quality-audit-mtz9jr5r/SKILL.md and apply its instructions to this example: [describe a test input]. Identify any missing files, dependencies or access. Produce the result requested by the skill without inventing data or running unreviewed scripts.

Expected result: output matching the skill instructions, or a precise list of missing prerequisites. A read confirmation alone does not validate a first use. If an external resource is unavailable, that path remains untested.