Notre avis
Exécute un ensemble prédéfini d'audits `/audit-*` en parallèle via des agents d'arrière-plan, puis fusionne leurs rapports en une synthèse unique.
Points forts
- Presets ciblés par zone de changement (audio, compression, ROM, DPCM, pipeline, songbank…) qui évitent de choisir les audits à la main
- Fan-out parallèle en agents d'arrière-plan : les audits indépendants ne s'exécutent pas en série
- Délègue toute la logique d'audit aux skills `/audit-*` et s'appuie sur un protocole partagé (sévérité, déduplication, format de rapport) au lieu de le dupliquer
- Couvre aussi les méta-audits (incremental, tech-debt) pour les vérifications rapides ou la dette accumulée
Limites
- Ne contient aucune logique d'audit propre : sa valeur dépend entièrement de l'existence et de la qualité des skills `/audit-*` référencés
- Les presets sont des listes figées ; aucune composition ad hoc d'audits n'est décrite
- Suppose la présence du sous-système d'audit complet et des fichiers `_audit-common.md` / `_audit-severity.md`
- Fortement lié à un projet précis (compilateur musical NES) : les noms de presets et d'audits ne sont pas génériques
À utiliser lorsqu'on veut lancer d'un coup un ensemble cohérent de contrôles après une modification dans un domaine donné ou avant de taguer une version.
À éviter si l'on a besoin d'un seul audit ciblé, ou si les skills `/audit-*` sous-jacents ne sont pas installés dans le projet.
Analyse de sécurité
SûrThe skill orchestrates other audit skills, creates a temporary directory, and writes reports under docs/audits. It does not contain destructive commands, exfiltration, obfuscation, or unsafe network operations. No allowed tools are declared, and the referenced audit skills are named rather than executing arbitrary code directly.
Aucun point d'attention détecté
Exemples
I'm about to tag v1.2.0 — run the pre-release audit preset and give me the merged report.I just reworked the DPCM drum mapping; run the dpcm-deep audit suite and summarize what it finds.Kick off the comprehensive audit preset in parallel and merge everything into one summary.description: "Run a preset suite of audits in parallel" argument-hint: "--preset <name>"
Audit Suite Orchestrator
Runs a named preset — a curated list of other /audit-* skills — by fanning them
out as background agents in parallel, then merges their reports into one summary. This
skill owns no audit logic of its own; it only sequences and aggregates. Shared protocol
(project layout, severity, dedup, report format) lives in
.claude/commands/_audit-common.md and .claude/commands/_audit-severity.md — not repeated here.
Every audit referenced below is a live skill at .claude/commands/audit-<name>/SKILL.md,
invoked as /audit-<name>. The full subsystem + meta set (12):
pipeline, nes-hardware, patterns, exporters, dpcm, arranger, mappers, tempo,
performance, safety, tech-debt, regression. (/audit-incremental is the delta meta-audit;
/audit-publish is post-processing; /audit-sync retires stale prose in these very
skill files after a fix lands — none of the three are ever part of a preset.)
Preset Index
| Preset | When | Audits |
|--------|------|--------|
| quick | after any change, < 10 min | incremental |
| pre-release | before tagging a version | pipeline · nes-hardware · mappers · regression |
| comprehensive | monthly / pre-milestone | all 12 |
| tech-debt-deep | after a milestone closes | tech-debt · incremental |
| audio-correctness | after APU/channel/pitch/envelope work | nes-hardware · tempo · exporters |
| compression-deep | after pattern/compression work | patterns · exporters · regression |
| rom-deep | after mapper / project-builder / compiler work | mappers · pipeline · nes-hardware |
| arranger-deep | after arranger / voice-allocation work | arranger · nes-hardware · tempo |
| dpcm-deep | after DPCM / drum work | dpcm · exporters |
| pipeline-deep | after main.py / stage-contract work | pipeline · patterns · exporters · safety |
| songbank-deep | after song build / jukebox work | pipeline · exporters · mappers · nes-hardware |
Presets
--preset quick
Fast sanity check after a change (< 10 min):
/audit-incremental --commits 5
--preset pre-release
Run before tagging a release — the stages that decide whether a ROM boots and plays:
/audit-pipeline/audit-nes-hardware/audit-mappers/audit-regression
--preset comprehensive
Full coverage (longest — run monthly or before a major milestone). Every subsystem + both meta audits:
/audit-pipeline/audit-nes-hardware/audit-patterns/audit-exporters/audit-dpcm/audit-arranger/audit-mappers/audit-tempo/audit-performance/audit-safety/audit-tech-debt/audit-regression
--preset tech-debt-deep
Surface accumulated debt (run after a milestone closes, before opening the next):
/audit-tech-debt/audit-incremental --commits 30
--preset audio-correctness
After APU register / channel / pitch-table / envelope work — the path from a note to a register write:
/audit-nes-hardware/audit-tempo/audit-exporters
--preset compression-deep
After pattern-detection or compression changes — round-trip integrity is the headline risk:
/audit-patterns/audit-exporters/audit-regression
--preset rom-deep
After mapper, project-builder, or CC65-compiler changes:
/audit-mappers/audit-pipeline/audit-nes-hardware
--preset arranger-deep
After arranger / role-analysis / voice-allocation / arpeggiation changes:
/audit-arranger/audit-nes-hardware/audit-tempo
--preset dpcm-deep
After DPCM sample / drum-mapping changes:
/audit-dpcm/audit-exporters
--preset pipeline-deep
After main.py dispatch or stage-contract changes:
/audit-pipeline/audit-patterns/audit-exporters/audit-safety
--preset songbank-deep
After song build / multi-song jukebox changes (#30/F-13). This feature is one code path
spread across four subsystems, and no single-song test or ROM exercises any of it — the
engine additions are .ifdef JUKEBOX_BUILD-gated, so an ordinary regression run passes
green while the jukebox path is broken. Its first audit pass found defects that produced
zero working ROMs at any bank size. Run all four; findings in one almost always have a
counterpart in another (the exporter emits what the engine reads):
/audit-pipeline— Dimension 8 (bank load → per-song frames → capacity pre-flight)/audit-exporters— Dimension 9 (export_song_bank_bytecode,song_table, prefixes)/audit-mappers— Dimension 7 (thesong_count is not None→JUKEBOX_BUILDgate)/audit-nes-hardware— Dimension 11 (.ifdef JUKEBOX_BUILDengine routines)
Execution
- Parse the
--presetargument from$ARGUMENTS. If unknown, list the preset index above and stop. mkdir -p /tmp/audit.- Launch each audit in the preset as a background agent, max 3 concurrent. The audits are independent — they read the tree and write distinct reports — so they fan out in parallel with no ordering dependency.
- Each audit writes its own report to
docs/audits/AUDIT_<TYPE>_<TODAY>.md(per _audit-common finalization). - When all complete, produce a combined summary:
# Audit Suite Summary — <preset> — <date>
| Audit | Findings | CRITICAL | HIGH | MEDIUM | LOW | Report |
|-------|----------|----------|------|--------|-----|--------|
| pipeline | 3 | 0 | 1 | 2 | 0 | AUDIT_PIPELINE_... |
| ... | ... | ... | ... | ... | ... | ... |
Total: X findings (C critical, H high, M medium, L low)
- If any CRITICAL findings exist, warn prominently at the top of the summary.
- For each report that has findings, suggest:
/audit-publish docs/audits/AUDIT_<TYPE>_<TODAY>.md
TDD Red-Green-Refactor
Testing
Skill qui guide Claude a travers le cycle TDD complet.
Audit d'Accessibilité Web
Testing
Réalise un audit d'accessibilité web complet selon les normes WCAG.
Générateur de Tests UAT
Testing
Génère des cas de test d'acceptation utilisateur structurés et complets.