Auditing (Bundle-Plugin Quality & Security Audit)

A diagnostic skill that scores Claude Code skill bundles across 10 categories — structure, version sync, skill quality, workflow integration and security — and writes a Go/No-Go audit report.

Dev & CodingAdvanced★ 258⑂ 20AI score 8/10Last updated: Apr 27, 2026

What it does

Auto-detects audit scope: whole project (10 categories), a single skill (4 categories), or a focused workflow audit (W1–W11).
Normalizes the target first — local path, GitHub URL, or zip/tar.gz — cloning into .bundles-forge/repos/ instead of random temp paths.
Runs bundles-forge audit-plugin / audit-skill / audit-workflow / audit-security to produce a deterministic JSON baseline, then dispatches the auditor agent to add qualitative scoring and a layered Markdown report in .bundles-forge/audits/.
Built-in security scan over 7 attack surfaces (SKILL.md content, hook scripts, HTTP hook configs, plugin code, agent prompts, bundled scripts, MCP configs) — no separate security skill needed.
Optional behavioral verification (W10–W11) via an evaluator agent, with explicit rules for marking sections N/A when it's skipped.

Who it's for

Developers building and publishing skill bundles/plugins for Claude Code or Cursor.
Maintainers who want a repeatable pre-release quality and security gate.
Anyone vetting third-party skills before installing them.

Example uses

Point it at a project root before a release to get all 10 category scores plus a Go/No-Go decision brief.
Point it at skills/my-skill/SKILL.md for a lightweight 4-category skill review (structure, quality, cross-refs, security).
After adding new skills, run a workflow audit with --focus-skills skill-a,skill-b to confirm inputs/outputs still chain correctly.

· · · Install guide · · ·

Try it now, no install

Paste this into Claude to use the skill without installing anything.

Read the instructions in this file and follow them to help me:
https://raw.githubusercontent.com/OdradekAI/bundles-forge/HEAD/skills/auditing/SKILL.md

What I want: (describe your task here)

If Claude can't open the link, open it yourself and paste the contents instead.

↓ If it works for you, download the ZIP below and install it. Then it runs on its own — no pasting each time.

Install in the Claude app (no terminal)

Download the ZIP with the button below.
In Claude, open Settings → Capabilities and turn on 'Code execution and file creation'. (one time)
Go to Customize → Skills → + → 'Upload a skill' and upload the ZIP.

↓ Download ZIP

Install in Claude Code

Let Claude do it — paste this into Claude Code

Install the skill I found on Claude Skill Mart.
Copy the skills/auditing folder from the GitHub repo OdradekAI/bundles-forge into my ~/.claude/skills/auditing/.
When it's done, tell me in one line what this skill can do.

Install with a command instead

git clone --depth 1 https://github.com/OdradekAI/bundles-forge.git && mkdir -p ~/.claude/skills && cp -r bundles-forge/skills/auditing ~/.claude/skills/auditing

⚠ This is a third-party skill. Check the source repository before installing.

Open a terminal and clone the repo: git clone --depth 1 https://github.com/OdradekAI/bundles-forge.git
Copy the skill into your Claude Code skills folder: mkdir -p ~/.claude/skills && cp -r bundles-forge/skills/auditing ~/.claude/skills/auditing
Confirm the bundled references/ and agents/ files came along — the skill reads agents/auditor.md, agents/evaluator.md, and several checklists. If they live elsewhere in the repo, install the whole repo as a plugin instead.
Check Python 3.9+ is available: python3 --version
Verify the CLI runs: bundles-forge --help (or python bundles-forge/bin/bundles-forge --help if it isn't on your PATH).
Restart Claude Code, then say "audit this project" or "audit this skill" to trigger it.
Find the generated reports and JSON baselines under .bundles-forge/audits/ in your workspace.

View source on GitHub ↗License: Apache-2.0