Token导航 LogoToken导航

Agent Skill · 研究检索

implementation-status-auditor(实施状况审核员)

用于辅助安全审计、权限检查、凭据风险、认证流程和常见漏洞排查。它适合让 Agent 梳理敏感配置、检查依赖风险、分析鉴权逻辑或生成安全复核清单。使用时不能把工具输出直接当最终结论,涉及密钥、令牌、用户数据或生产系统时,应先确认最小权限、脱敏方式和操作边界。

implementation-status-auditor 是研究检索类 Agent Skill,可用宿主为 Codex、Claude、Cursor、Gemini CLI,通过GitHub 仓库获取,权限为需要联网;许可证信息还不明确,第三方扫描已通过,按安装量在研究检索类的 73,675 个 Skill 里排第 62,244。

总安装 339周安装 14GitHub Stars 11下载 111核验 2026-05-01

安装说明

本站只整理中文说明,不托管安装包,也不代用户安装。
GitHub
许可证
unknown

安装方式

通过对话安装

复制提示词发给支持本地命令或 Skills 的 AI 助手,先确认命令和权限,再让它执行。

请帮我安装这个 Agent Skill:implementation-status-auditor(实施状况审核员)
来源仓库:https://github.com/peterbamuhigire/skills-web-dev
仓库路径:skills/implementation-status-auditor
安装命令:
npx skills add https://github.com/peterbamuhigire/skills-web-dev --skill implementation-status-auditor
安装前请先检查当前环境是否支持对应 CLI,并向我确认将要执行的命令、安装目录、联网范围和文件读写权限;确认后再执行。

命令行安装

复制命令到本机终端执行。该命令会通过 npx skills 从第三方来源获取 Skill;本站只展示命令,不托管安装包,也不自动执行。

skills.shnpx skills
npx skills add https://github.com/peterbamuhigire/skills-web-dev --skill implementation-status-auditor

这个 Skill 是做什么的

研究检索类 Skill 主要解决「找资料、核对事实、把来源整理清楚」的问题,通常会让助手先检索再总结。

implementation-status-auditor 用于辅助安全审计、权限检查和认证流程分析,帮助梳理敏感配置与依赖风险。适用于安全复核、鉴权逻辑检查及常见漏洞排查等安全相关任务。可生成安全复核清单,但不能将工具输出直接作为最终结论。

安装命令为 npx skills add https://github.com/peterbamuhigire/skills-web-dev --skill implementation-status-auditor。涉及密钥、令牌或生产系统时,应先确认最小权限与脱敏方式。

来源仓库内路径:skills/implementation-status-auditor

上手步骤

4 步
  1. 1

    确认自己的宿主工具

    公开资料标注支持 Codex、Claude、Cursor、Gemini CLI;先确认自己用的是其中之一,再按对应工具的 Skills 目录放置。

  2. 2

    拿到安装命令

    可以直接复制的命令是 npx skills add https://github.com/peterbamuhigire/skills-web-dev --skill impleme…;命令里的占位符换成自己的路径或密钥再执行。

  3. 3

    安装后重启宿主

    命令执行完要完全退出宿主工具再打开,让新装的 Skill 被重新扫描到,否则列表里可能看不到。

  4. 4

    按最小权限试用

    它需要需要联网,先在测试目录或测试账号里跑,确认没问题再放到正式项目。

常见问题

6 条

implementation-status-auditor 怎么安装?

在终端执行 npx skills add https://github.com/peterbamuhigire/skills-web-dev --skill implementation-st…。装完完全退出宿主工具再打开,让它重新扫描本地 Skill。

implementation-status-auditor 支持哪些 AI 工具?

公开资料标注支持 Codex、Claude、Cursor、Gemini CLI。其他工具只要能读取本地 Skill 目录,一般也能手动放进去,但要自己确认触发方式是否一致。

implementation-status-auditor 需要什么权限?

权限级别是需要联网。该 Skill 可能需要联网访问来源站点、仓库或外部 API;具体网络访问范围需要结合源码和 README 复核。

implementation-status-auditor 是免费的吗?

公开资料没有标注明确许可证,收费和商用限制都无法确认。正式使用前请到来源仓库核对授权说明。

implementation-status-auditor 用的人多吗?

公开数据是累计安装 339 次,近一周安装 14 次,下载 111 次,GitHub 11 星。这些数字来自第三方目录统计,只能当作热度参考,不代表质量或安全性。

implementation-status-auditor 安全吗?

第三方扫描结果为通过,但这只覆盖已知的静态检查项,不能替代自己读一遍源码和安装命令。

值得选的地方和要先想清楚的地方

值得选的地方

  • 同时适配 4 种工具,换客户端不用重新找替代品。
  • 第三方扫描已通过,常见的高风险行为没有命中。

先想清楚的地方

  • 许可证没有明确标注,能不能商用、能不能再分发都不确定。
  • 第三方目录整理,版本更新和行为细节以来源仓库为准。

适不适合你

更适合

  • 已经在用 Codex,想直接扩展它能力的人。
  • 需要处理研究检索类任务、又不想每次都手写提示词的人。

不太适合

  • 需要明确授权才能用到公司项目里的场景。
  • 需要厂商级技术支持和 SLA 的生产系统。

研究检索类 Skill 对比

6 个同类
Skill总安装GitHub 星权限许可证扫描
find-skills

寻找技能 · Codex、Claude

31,199,81316,486操作浏览器MIT有提醒
self-improving-agent

自我改进 Agent · OpenClaw

16,464,0023,396接触敏感数据MIT-0通过
soultrace

灵魂追踪 · Codex、Claude

7,588,94412需要联网未明确有提醒
self-improving

自我完善 · OpenClaw

6,829,2841,046需要联网MIT-0通过
microsoft-foundry

微软代工厂 · Codex、Claude

6,614,144764调用外部服务未明确有提醒
implementation-status-auditor

实施状况审核员 · 本页

33911需要联网未明确通过

按安装量取同分类前几名;数字来自第三方目录统计,只作热度参考,不代表质量结论。

SKILL.md 原文

Platform Notes

  • Optional helper plugins may help in some environments, but they must not be treated as required for this skill.

Implementation Status Auditor

Use When

  • Conduct a comprehensive implementation status audit of any software project. Produces structured documentation in docs/implementation/review-{date}/ with gap analysis, schema audit, integration status, completion blueprint, and prioritized action...
  • The task needs reusable judgment, domain constraints, or a proven workflow rather than ad hoc advice.

Do Not Use When

  • The task is unrelated to implementation-status-auditor or would be better handled by a more specific companion skill.
  • The request only needs a trivial answer and none of this skill's constraints or references materially help.

Required Inputs

  • Gather relevant project context, constraints, and the concrete problem to solve; load references only as needed.
  • Confirm the desired deliverable: design, code, review, migration plan, audit, or documentation.

Workflow

  • Read this SKILL.md first, then load only the referenced deep-dive files that are necessary for the task.
  • Apply the ordered guidance, checklists, and decision rules in this skill instead of cherry-picking isolated snippets.
  • Produce the deliverable with assumptions, risks, and follow-up work made explicit when they matter.

Quality Standards

  • Keep outputs execution-oriented, concise, and aligned with the repository's baseline engineering standards.
  • Preserve compatibility with existing project conventions unless the skill explicitly requires a stronger standard.
  • Prefer deterministic, reviewable steps over vague advice or tool-specific magic.

Anti-Patterns

  • Treating examples as copy-paste truth without checking fit, constraints, or failure modes.
  • Loading every reference file by default instead of using progressive disclosure.

Outputs

  • A concrete result that fits the task: implementation guidance, review findings, architecture decisions, templates, or generated artifacts.
  • Clear assumptions, tradeoffs, or unresolved gaps when the task cannot be completed from available context alone.
  • References used, companion skills, or follow-up actions when they materially improve execution.

Evidence Produced

CategoryArtifactFormatExample
Release evidenceImplementation status audit reportMarkdown doc in docs/implementation/ covering feature-by-feature status, evidence, and gapsdocs/implementation/status-audit-2026-04-16.md

References

  • Use the references/ directory for deep detail after reading the core workflow below.

Overview

This skill transforms Claude into an elite Enterprise Software Architect and Technical Auditor. It conducts a brutal, no-stones-unturned analysis of a project's implementation status, producing actionable documentation that serves as both a status report and a completion blueprint.

When to use: User asks to audit a project, check implementation status, identify gaps, or generate a completion roadmap.

Core Workflow

Step 0: Prepare Output Directory

Create the review directory with today's date:

docs/implementation/review-{DD-MMM-YYYY}/

Example: docs/implementation/review-21-Feb-2026/

If the directory exists (re-run), append a sequence: review-21-Feb-2026-v2/.

Step 1: Discovery Phase (Gather Inputs)

Before any analysis, systematically collect all project materials. Use the Explore agent and direct file reads.

Required discovery targets:

SourceWhat to FindHow
Database schemasTables, migrations, ERDsGlob **/*.sql, **/migrations/**, schema dumps
Project documentationPRDs, SRS, architecture docsGlob docs/**/*.md, **/AGENTS.md, **/CLAUDE.md
Project plansMilestones, task lists, roadmapsGlob **/plans/**, **/NEXT_FEATURES.md, **/requirements.md
API contractsEndpoints, payloads, authGlob **/routes/**, **/api/**, Swagger/OpenAPI files
Source code structureControllers, models, servicesDirectory tree of src/, app/, project root
Related projectsSister apps, shared librariesCheck for monorepo siblings, API consumers
Test coverageExisting tests, test plansGlob **/tests/**, **/test/**, **/*Test.*
Config & infraCI/CD, deployment, envGlob **/docker*, **/.github/**, **/deploy/**

Discovery SOP:

  1. Read CLAUDE.md, AGENTS.md, README.md at project root
  2. Read docs/ directory tree for all planning/architecture docs
  3. Scan database directory for schema files and migrations
  4. Map the source code directory structure (top 2 levels)
  5. Identify all API route/controller files
  6. Check for sister/related project references
  7. Locate test files and coverage reports

Step 2: Analysis Phase (Five Audit Pillars)

Analyze gathered materials against five pillars:

Pillar 1: Schema & Data Model Reality Check

Cross-reference database schemas against project documentation.

Checklist:

  • All planned entities have corresponding tables
  • Foreign keys enforce documented relationships
  • Multi-tenancy isolation is schema-enforced (tenant_id scoping)
  • Indexes support documented query patterns
  • Normalization level is appropriate (3NF minimum for transactional)
  • Audit columns exist (created_at, updated_at, created_by)
  • Soft-delete support where documented
  • Character set/collation consistency (utf8mb4_unicode_ci)

Cross-reference with: mysql-best-practices skill for schema standards.

Pillar 2: Implementation vs. Plan Gap Analysis

Compare current codebase against project plans and requirements.

Classification system:

StatusDefinitionEvidence Required
CompleteFeature fully functionalRoutes + Controllers + Models + UI + Tests
PartialSome layers existSchema exists but no endpoints, or UI stub only
PhantomIn plan, zero footprintNo schema, no code, no routes — only in docs
UndocumentedExists in code, not in plansCode present but no matching requirement

Cross-reference with: feature-planning skill for spec-to-implementation mapping.

Pillar 3: Cross-Platform & Integration Integrity

Evaluate API contracts and data flow between systems.

Checklist:

  • All documented API endpoints exist in code
  • Authentication/authorization covers all endpoints
  • Response payloads match expected client schemas
  • Pagination implemented where needed
  • Error responses follow consistent format
  • Webhook/callback endpoints documented and implemented
  • Data sync mechanisms between platforms verified

Cross-reference with: api-pagination, api-error-handling, dual-auth-rbac skills.

Pillar 4: Technical Risk & Debt Assessment

Identify blockers, debt, and architectural concerns.

Risk categories:

  • Critical Blocker — Prevents next milestone, must fix immediately
  • High Debt — Works now but will break at scale
  • Medium Debt — Suboptimal but functional
  • Low Debt — Cosmetic or minor improvement
Pillar 5: Completion Blueprint

Transform gaps into an actionable completion plan.

Blueprint structure:

  • Group remaining work by module/feature
  • Prioritize by dependency order (foundations first)
  • Estimate complexity (S/M/L/XL)
  • Map each item to the skills needed for implementation
  • Define acceptance criteria for each item

Step 3: Documentation Output Phase

Generate the following files in the review directory:

docs/implementation/review-{date}/
├── 00-executive-summary.md          # Project health overview
├── 01-schema-audit.md               # Database & data model analysis
├── 02-implementation-progress.md    # Module-by-module status
├── 03-integration-status.md         # Cross-platform & API analysis
├── 04-technical-risks.md            # Risks, debt, and blockers
├── 05-completion-blueprint.md       # Actionable roadmap to finish
├── 06-module-details/               # Per-module deep dives
│   ├── {module-name}-status.md      # One file per major module
│   └── ...
└── 07-appendices/                   # Supporting data
    ├── schema-entity-map.md         # Table-to-feature mapping
    ├── api-endpoint-inventory.md    # Full endpoint listing
    └── test-coverage-map.md         # Test status per module

Report Templates

00-executive-summary.md

# Implementation Status Audit — Executive Summary
**Project:** {name}
**Date:** {date}
**Auditor:** Claude (Implementation Status Auditor Skill)

## Project Health Score: {X}/10

## Completion Overview
| Category | Complete | Partial | Missing | Total |
|----------|----------|---------|---------|-------|
| Database Schema | X | X | X | X |
| Backend API | X | X | X | X |
| Frontend UI | X | X | X | X |
| Authentication | X | X | X | X |
| Testing | X | X | X | X |
| **Overall** | **X%** | **X%** | **X%** | — |

## Top 3 Critical Findings
1. {finding}
2. {finding}
3. {finding}

## Recommended Immediate Actions
1. {action} — Skill: `{skill-name}`
2. {action} — Skill: `{skill-name}`
3. {action} — Skill: `{skill-name}`

02-implementation-progress.md

# Implementation Progress by Module

## Module: {name}
**Status:** Complete | Partial | Missing
**Completion:** {X}%

### What Exists
- {component}: {status with evidence}

### What's Missing
- {component}: {what needs to be built}
- **Skill to use:** `{skill-name}`
- **Complexity:** S | M | L | XL
- **Blocked by:** {dependency or "None"}

05-completion-blueprint.md

# Completion Blueprint

## Phase 1: Foundation (Must Complete First)
| # | Task | Module | Complexity | Skill | Blocked By |
|---|------|--------|-----------|-------|------------|
| 1 | {task} | {module} | S/M/L/XL | `{skill}` | None |

## Phase 2: Core Features
...

## Phase 3: Integration & Polish
...

## Phase 4: Testing & Hardening
...

Cross-Skill Integration Map

This auditor leverages other skills for both analysis and recommended actions:

Audit AreaAnalysis SkillAction Skill
Database schema gapsmysql-best-practicesmysql-best-practices
Missing featuresfeature-planningfeature-planning
API gapsapi-error-handlingapi-pagination, dual-auth-rbac
Multi-tenant issuesmulti-tenant-saas-architecturemulti-tenant-saas-architecture
Documentation gapsdoc-architectupdate-claude-documentation
Testing gapssdlc-testingsdlc-testing
Planning gapssdlc-planningsdlc-planning
UI issueswebapp-gui-designjetpack-compose-ui
Mobile integrationandroid-developmentandroid-saas-planning
Security concernsvibe-security-skillweb-app-security-audit
Code quality toolingphp-modern-standardsphp-modern-standards
User docs missingmanual-guidesdlc-user-deploy
Module architecturemodular-saas-architecturemodular-saas-architecture

Iterative Drilling

After the initial audit, the user can request deep dives:

  • "Drill into {module}" — Generate detailed 06-module-details/{module}-status.md
  • "Show me the API payloads for {feature}" — Extract expected JSON from schema
  • "What tests are missing for {module}" — Cross-reference with sdlc-testing
  • "Generate the completion plan for {phase}" — Expand blueprint phase into tasks

Anti-Patterns

Don'tDo Instead
Guess about features without reading codeRead actual route files and controllers
Mark features "complete" based on schema aloneVerify full stack: schema + API + UI + tests
Skip sister project analysisAlways check for API consumers/mobile apps
Write one massive fileBreak into the defined file structure
Ignore test coverageAlways report testing status per module
Make vague recommendationsMap every action to a specific skill

Output Standards

  • All generated files follow doc-standards.md (500-line max per file)
  • Use tables for status mappings (scannable, not prose)
  • Every gap must have: description, severity, recommended skill, complexity
  • Blueprint must be dependency-ordered (no orphan tasks)
  • Executive summary must fit on one screen (< 40 lines of content)

See Also

  • references/audit-checklist.md — Complete pre-flight checklist
  • references/gap-analysis-patterns.md — Classification methodology
  • references/drill-down-templates.md — Templates for iterative deep dives

平台分布

Codex

31.54%
按下载量换算35

Claude

31.38%
按下载量换算35

Cursor

18.72%
按下载量换算21

Gemini CLI

8.75%
按下载量换算10

安全审计

Gen Agent Trust Hub

通过

Socket

通过

Snyk

通过

权限和风险

需要联网

该 Skill 可能需要联网访问来源站点、仓库或外部 API;具体网络访问范围需要结合源码和 README 复核。

安装前确认

本站仅展示第三方公开信息,不托管安装包,不提供自动安装或运行环境。安装前应自行审查源码、依赖和命令行为。目前只有一个公开来源,建议同时核对源仓库。

继续浏览同类 Skills