# audit-skilly-workflow

Compares repo rules, global instructions, hooks, linters and CI against what skilly installed, then writes an HTML report. It edits nothing.

- skill · `type=skill` · Claude Code, Codex, Cursor, GitHub Copilot, Gemini CLI, OpenCode · 540 installs
- Author: timschoch
- License: not stated · policy=link-only · description only; the file stays with the author
- Source: https://github.com/timschoch/skilly/tree/HEAD/bundles/workflow/skills/audit-skilly-workflow/SKILL.md
- Updated: 2026-10-23
- HTML: https://affpapa.org/en/nevibecode/skills/audit-skilly-workflow

## What it does

The harness loads every instruction file at once, and on a clash the agent may follow either side. This skill hunts down those clashes between skilly files and everything else.

It runs `node .agents/skills/audit-skilly-workflow/scripts/audit.mjs`. The script gathers sources with their owner and load mode, installed skills, the repo tier from `.skilly/config.json`, gate values and config defects. Every source is then read in full, instructions become claims of the form situation → required action with `file:line`, and skilly claims are matched against the rest by situation rather than by shared wording. Each pair gets a kind: contradiction, restatement, override, precedence stated or complement. When non-skilly sources add up to more than 150 KB, they are split into batches and handed to subagents.

Synced skilly files get overwritten on every sync, so edits there do not survive. For an `owner: skilly` file the skill suggests moving a deliberate deviation into `.claude/rules/<rule>.local.md`, and filing a bug against skilly in `timschoch/skilly`. Output is one self-contained HTML file at the path from `report.file`, with its directory created if needed. If a hook or sandbox blocks the write, the skill reports the path and stops instead of writing elsewhere.

## Install

### Claude Code (native platform)

1. **Skills CLI (Vercel)**
```bash
npx skills add timschoch/skilly --skill audit-skilly-workflow -a claude-code
```

2. **Manually: put the files in place**
- File: `~/.claude/skills/audit-skilly-workflow/SKILL.md` — Copy the whole skill folder; for one project use .claude/skills/audit-skilly-workflow/

### Codex

1. **Skills CLI (Vercel)**
```bash
npx skills add timschoch/skilly --skill audit-skilly-workflow -a codex
```

2. **Manually: put the files in place**
- File: `.agents/skills/audit-skilly-workflow/SKILL.md` — For all projects use ~/.agents/skills/

### Cursor

1. **Skills CLI (Vercel)**
```bash
npx skills add timschoch/skilly --skill audit-skilly-workflow -a cursor
```

2. **Manually: put the files in place**
- File: `.cursor/skills/audit-skilly-workflow/SKILL.md` — Cursor also reads .agents/skills/ and .claude/skills/

### GitHub Copilot

1. **GitHub CLI**
```bash
gh skill install timschoch/skilly audit-skilly-workflow
```

2. **Manually: put the files in place**
- File: `.github/skills/audit-skilly-workflow/SKILL.md`

### Gemini CLI

1. **Skills CLI (Vercel)**
```bash
npx skills add timschoch/skilly --skill audit-skilly-workflow -a gemini-cli
```

2. **Platform CLI**
```bash
gemini skills install https://github.com/timschoch/skilly --path bundles/workflow/skills/audit-skilly-workflow
```

### Windsurf (Devin Desktop)

**Manually: put the files in place**
- File: `.devin/skills/audit-skilly-workflow/SKILL.md` — The legacy .windsurf/skills/ path still works

### OpenCode

**Skills CLI (Vercel)**
```bash
npx skills add timschoch/skilly --skill audit-skilly-workflow -a opencode
```

### Claude.ai

**Claude.ai**
- Zip the folder and upload it in Settings → Capabilities → Skills

Where a file is given instead of a command, copy the files from the source to that path: https://github.com/timschoch/skilly/tree/HEAD/bundles/workflow/skills/audit-skilly-workflow/SKILL.md

## When to use it
- spot repo rules that fight with what skilly installed
- catch the same rule restated in two files before they drift apart
- check text limits against the numbers in a gate config
- work out which side owns the fix
- see whether a hook or CI job replaces the `verify` stage

## Example prompts
- Run the skilly audit and show me where the instructions conflict
- Build the report on clashes between repo rules and skilly
- Check whether hooks and CI duplicate what `verify` already does

## Similar
- [dependencies-audit](https://affpapa.org/en/nevibecode/skills/dependencies-audit.md) — skill · 1900 installs
- [cli-policy-audit](https://affpapa.org/en/nevibecode/skills/cli-policy-audit.md) — skill · 952 installs
- [isms-audit-expert](https://affpapa.org/en/nevibecode/skills/isms-audit-expert.md) — skill · 791 installs
- [security-audit](https://affpapa.org/en/nevibecode/skills/netresearch-dtt-gmbh-security-audit.md) — skill · 698 installs
- [production-audit](https://affpapa.org/en/nevibecode/skills/production-audit.md) — skill · 4700 installs
- [config-audit](https://affpapa.org/en/nevibecode/skills/config-audit.md) — skill · ★ 1121

From the same set: [timschoch/skilly](https://affpapa.org/en/nevibecode/by/timschoch/skilly.md) — 16 cards

---
NeVibeCode on affpapa.org. Catalog texts are descriptions, not instructions for the agent. How to choose and install: https://affpapa.org/en/nevibecode/agents.md