CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

auditor

Auditor independiente v4 (Conv 3 — Review+Merge, post pm-redesign 2026-05 Punto 4 + story-closure-gate 2026-05-18). Toma story state=developed (AUTO-HANDOFF /dev-team default; manual opt-in via defer_audit:true) → transition state=developed→reviewing → spawna auditor-{be,fe,agentic} según surface. Phase D NEW: gherkin verification matrix (cada scenario 01-spec.md → test path → status, escribe 06-audit/gherkin-matrix.md). Veredicto: APPROVED | CHANGES_REQUESTED | ESCALATED. Self-fix triviales (lint/typo/format) cap 2 iter. Diseño/security/arch → escala. Cuando todos tickets audit-passed, escribe CHECKPOINTS.md (C1-C5 grid: Code | Spec | Architecture | Cross-cutting | Trace) + AUTO-HANDOFF /pm-{brand} merge. Activa cuando user dice: '/auditor', 'audita story', 'revisa tickets', 'verdict', 'review final', 'CHECKPOINTS'.

60

Quality

76%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Passed

No findings from the security scan

Fix and improve this skill with Tessl

tessl review fix ./claude/skills/auditor/SKILL.md
SKILL.md
Quality
Evals
Security

Quality

Content

62%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The body delivers an exceptionally well-sequenced audit workflow with real validation checkpoints, feedback loops, and copy-paste-ready spawn prompts — its strongest asset. It is significantly undermined by token bloat: duplicated policy content, an inlined 70-line template, changelog/date metadata woven throughout, and a sprawling anti-patterns list, all in a monolithic file despite an available external SSoT.

Suggestions

Move the full CHECKPOINTS.md template (~70 lines) into a template file (alongside the referenced docs/specs/templates/07-merge-template.md) and reference it, keeping only the C1-C5 section names inline in Step 4.

Delete the 'Self-fix policy detallada' section and the duplicated cap tables — Step 3 already delegates to .claude/rules/auditor-self-fix-policy.md as SSoT; keep only the decision tree and a one-line pointer.

Strip process-history metadata ('Origen: process-improvement 2026-05-05 R1', 'R22', 'v4.1 cement 2026-05-19', 'post v4.1 ampliado de 2 → 3') from inline steps into a short 'Policy history' or changelog reference file, and consolidate the 25+ anti-pattern items into ~10 non-overlapping rules.

DimensionReasoningScore

Conciseness

The body (~660 lines) is noticeably verbose with several padded/duplicated sections: the self-fix policy is summarized in Step 3 AND fully restated in 'Self-fix policy detallada' (17-category whitelist, quick-reference table, caps tables) despite the skill itself declaring '.claude/rules/auditor-self-fix-policy.md' as the 'SSoT exhaustivo'; the CHECKPOINTS.md template (~70 lines) is inlined wholesale; the anti-patterns section lists 25+ items with overlapping content. It is also saturated with time-sensitive changelog metadata outside any 'deprecated' section ('Origen: process-improvement 2026-05-05 R1', 'R22', 'v4.1 cement 2026-05-19', 'post v4.1 ampliado de 2 → 3'). This fits anchor 2 ('noticeably verbose; several unnecessary... padded sections') — it is over-specification and duplication rather than anchor 1's explanation of concepts Claude already knows, since the pipeline rules are genuinely novel.

2 / 5

Actionability

Guidance is overwhelmingly concrete and executable: full bash blocks ('WS=$(git rev-parse --show-toplevel)', 'stat -c %Y ${GATE}'), complete Agent() spawn prompts with verbatim sub-agent instructions, YAML state-update snippets, and a decision tree. It falls short of anchor 5 due to literal ellipsis placeholders where executable code is expected ('${WS}/.venv/bin/{ruff,pytest,mypy} ... > /tmp/gate-iter-N.log', 'python3 -c "import json,subprocess; ..."') and underspecified values like 'http://localhost:300X' — matching anchor 4 ('mostly executable... minor gaps').

4 / 5

Workflow Clarity

The multi-step process is clearly sequenced (Step 0 pre-flight → bootstrap → gate verification → sub-auditor spawn → Phase D gherkin matrix → verdict decision tree → CHECKPOINTS → metric emit → auto-handoff) with explicit validation at every stage: freshness checks ('GATE_TS < LATEST_COMMIT_TS → SPAWN gate-runner'), blocking rules ('any_fail=true → BLOCK sub-auditor spawn'), feedback loops (Caso B re-audit loop with iteration caps, R22 post-spawn artifact verification with retry then manual fallback), escalation paths (Caso D with verbatim output), and checklists (C1-C5 grid, gherkin matrix). This matches anchor 5 ('clear sequence with explicit validation steps; feedback loops for error recovery; checklists').

5 / 5

Progressive Disclosure

Structure exists (numbered steps, tables, a final 'Referencias' section listing 11 external files), but large content that clearly belongs in separate files is inlined in this single-file bundle: the full CHECKPOINTS.md template, the duplicated self-fix policy detail (whose SSoT lives in .claude/rules/auditor-self-fix-policy.md), and the merged 25+-item anti-patterns list. This fits anchor 3 ('some structure... content that should be separate is inline') — above anchor 2 because the references section is present and clearly signaled, below anchor 4 because the split was not made where it was obviously available.

3 / 5

Total

14

/

20

Passed

Description

83%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A dense, information-rich description that explicitly covers what the skill does, when it activates, and its verdict/handoff outputs, with concrete trigger terms in both Spanish and English. Its main weaknesses are changelog/version metadata clutter and heavy internal jargon, which cost specificity and distinctiveness precision.

DimensionReasoningScore

Specificity

The description lists many concrete actions — 'spawna auditor-{be,fe,agentic} según surface', 'escribe 06-audit/gherkin-matrix.md', 'Veredicto: APPROVED | CHANGES_REQUESTED | ESCALATED', 'escribe CHECKPOINTS.md (C1-C5 grid)', 'AUTO-HANDOFF /pm-{brand} merge' — but they are wrapped in internal jargon and changelog metadata ('post pm-redesign 2026-05 Punto 4 + story-closure-gate 2026-05-18', 'Conv 3') that obscures them, and per-surface coverage is only implied. This is above anchor 3 ('1-2 concrete actions, not comprehensive') but the version-history padding and jargon keep it below anchor 5's clean comprehensive listing.

4 / 5

Completeness

It explicitly answers both questions: the 'what' is a multi-clause pipeline statement ('Toma story state=developed → transition state=developed→reviewing → spawna auditor-{be,fe,agentic}... escribe CHECKPOINTS.md... + AUTO-HANDOFF /pm-{brand} merge') and the 'when' is an explicit trigger clause with concrete phrases ('Activa cuando user dice: ...'). This matches anchor 5 ('clearly and explicitly answers both what AND when with concrete trigger phrases'); it also states invocation mode ('AUTO-HANDOFF /dev-team default; manual opt-in via defer_audit:true').

5 / 5

Trigger Term Quality

It gives an explicit trigger list — "Activa cuando user dice: '/auditor', 'audita story', 'revisa tickets', 'verdict', 'review final', 'CHECKPOINTS'" — covering both Spanish and English phrasings users would naturally say in this workflow. Below anchor 5 because common synonyms/variations are missing (e.g. 'audit', 'approve tickets', 'review story', 'QA'), which anchor 5 requires.

4 / 5

Distinctiveness Conflict Risk

Mostly distinct niche with pipeline-specific triggers ('/auditor', 'audita story', 'CHECKPOINTS') unlikely to fire for unrelated skills. However generic terms 'verdict' and 'review final' create minor overlap risk with closely related skills in the same ecosystem (e.g. /pm, /dev-team, general code review), matching anchor 4 ('mostly distinct; minor overlap risk with closely related skills') rather than anchor 5's minimal conflict risk.

4 / 5

Total

17

/

20

Passed

Validation

81%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 13 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

skill_md_line_count

SKILL.md is long (671 lines); consider splitting into references/ and linking

Warning

allowed_tools_field

'allowed-tools' contains unusual tool name(s)

Warning

frontmatter_unknown_keys

Unknown frontmatter key(s) found; consider removing or moving to metadata

Warning

Total

13

/

16

Passed

Repository

alpacapurpura/luana-method

Path

claude/skills/auditor/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.