Skip to content
cccskills
FreePublished on GitHub

red-handed-audit

Check an agent’s test claims against local Claude Code transcripts and the git working tree. Nine rule-based checks identify gaps such as missing runs or failed tests, with timestamps and quoted evidence, without calling a model.

OriginalShow the original description

Check whether the tests the agent said passed actually ran. Reads the Claude Code session transcript and git state locally, then reports each gap with a timestamp and the quoted line. No model calls, nothing leaves the machine.

Run score Not tested

See how to install

Good for

  • Verify that reported passing tests actually ran
  • Investigate when and why a test suite became smaller
  • Review a completed session before trusting its summary
  • Check for test expectations changed to match a bug

Files included (1)

  • SKILL.md2.4 KB

SKILL.md (original)

Review the instructions the agent will receive before you install.

Red-handed Audit

Audit the current session's claims against its own record. If the agent said the tests pass, this checks that a test run actually happened, that it did not fail, and that no expected value was quietly rewritten to match a bug.

When to Use This Skill

  • The agent reported passing tests and you want to confirm a run actually happened
  • A test suite got smaller and you want to know when and why
  • You are reviewing a finished session before trusting its summary

What This Skill Does

  1. Runs npx --yes @jinhyuk9714/red-handed@latest audit in the project directory
  2. The CLI reads the local Claude Code transcript and the git working tree
  3. Nine deterministic checks compare what was said with what was done
  4. Each finding comes with a timestamp and the quoted line it came from

No model is called. The same session gives the same verdict every time.

How to Use

Basic Usage

Audit this session. Did the tests I was told about actually run?

The skill runs:

npx --yes @jinhyuk9714/red-handed@latest audit

Useful variations:

npx --yes @jinhyuk9714/red-handed@latest audit --all      # every session for this project
npx --yes @jinhyuk9714/red-handed@latest stats            # counts across the whole machine
npx --yes @jinhyuk9714/red-handed@latest audit --lang ko  # report in Korean

Example

User: "Before I merge this, check whether the tests really ran."

Output:

CAUGHT  claim-vs-fail
  14:02:31  "All 33 tests pass."
  14:01:58  npx vitest run … exit 1, 2 failed
  The last run before the claim failed. Nothing ran after it.

A clean session prints nothing to accuse. That is the common case.

Tips

  • CAUGHT needs two things at once: the session shows it happening and the code still shows it now
  • SUSPICIOUS means the pattern is there but the motive is not established
  • Verification the tool cannot read counts as verification it did not see, so browser tests and custom scripts only ever reach SUSPICIOUS
  • Exit code 1 means findings at the CAUGHT tier. That is the tool working, not an error

Reviews

No reviews yet. Tell others what you thought.

Comments

No login needed. Share how it worked for you, ask a question, or note where it did not run.

No comments yet. Be the first to write one.

Comments are published right away. Do not include personal information such as email addresses or phone numbers. Up to 2 URLs.

0 / 1,000 characters

This form is protected by reCAPTCHA, and the Google Privacy Policy and Terms of Service apply.

More skills from this repository

Handle ActiveCampaign contact and marketing tasks through Rube MCP, a connection for agent tools. Find or create contacts, manage tags and subscriptions, enroll contacts in existing automated workflows, and create follow-up tasks.

  • Finding or registering contacts
  • Adding or removing contact tags
  • Subscribing contacts to lists or unsubscribing them
davepoon/buildwithclaude3.7KUpdated Oct 20, 2026

Research competitors’ live Meta and Google ads to identify opening hooks, offers, calls to action, and landing pages. Receive a sourced creative brief and up to three test ideas adapted to your product.

  • Find angles for new ad copy
  • Plan creative tests using competitor ads
  • Choose a landing page message
davepoon/buildwithclaude3.7KUpdated Oct 20, 2026

agent-analytics

FreeSummary

Add website or app tracking, then use command-line tools to review traffic, signups, drop-off, and returning users across projects. Run A/B tests, which compare alternative headlines or buttons, and inspect results to guide changes.

  • Adding page-view and key-action tracking
  • Reviewing traffic and referral sources across projects
  • Finding where visitors drop out before signup or purchase
davepoon/buildwithclaude3.7KUpdated Oct 20, 2026

Establish rules for when an AI agent should recall past context and save lasting decisions, corrections, preferences, and failures. Works with Markdown files or memory services, preserving decision history and surfacing conflicting records.

  • Carry project conventions into the next session
  • Save user corrections and lasting preferences
  • Record failed approaches and their causes
davepoon/buildwithclaude3.7KUpdated Oct 20, 2026

Audit local AI coding-agent sessions with agenttrace to identify spending, token use, tool failures, and operational problems. Produce readable or structured reports and define pass-or-fail thresholds for automated continuous integration checks.

  • Investigating session costs and token waste
  • Finding repeated tool failures and retries
  • Exporting session reports as Markdown or JSON
davepoon/buildwithclaude3.7KUpdated Oct 20, 2026

Audit saved agent sessions for access to private files and evidence that secret values entered an agent's context. Get findings without displaying secrets, identify keys needing rotation, and inspect Claude Code or Codex sessions in a local report.

  • Check whether an agent accessed .env files
  • Identify keys that may need rotation
  • Audit private-file access by subagents
davepoon/buildwithclaude3.7KUpdated Oct 20, 2026

See all skills by davepoon

Report a problem with this skill