Automation Audit Ops
Read-only operator audit of automations. Produce an evidence table before rewriting anything.
Boundaries & Handoffs
| Need | Route |
|---|---|
| Skill catalog frontmatter and boundary hygiene | skill-stocktake |
| Agent wrapper, tool-loop, or context leakage diagnosis | agent-architecture-audit |
| Filing or merging GitHub issues, PRs, workflow runs | gh-axi |
| Secrets, auth, or privileged webhook review | full-audit-keamanan |
| Live cron / CI / hook / MCP / wrapper inventory | automation-audit-ops |
Start read-only unless the user explicitly asked for fixes.
Procedure
Consult references/inventory.md for live-state labels.
- Inventory the surface. Repo hooks, GitHub Actions and schedules, MCP configs, wrapper scripts, connector entries. Group: local runtime, CI, external systems, notifications.
- Classify live state. Configured, authenticated, recently verified, stale/broken, missing. Presence in config is not proof of working.
- Cite a proof path for every important claim: file, workflow run, hook log, command output, or failure signature. Ambiguity stays labeled ambiguous.
- Recommend keep / merge / cut / fix-next per overlapping or suspect item. Name one canonical lane. Do not delete until the table exists.
Output
CURRENT SURFACE
- automation / source / live state / proof
FINDINGS
- breakage / overlap / stale / missing
RECOMMENDATION
- keep / merge / cut / fix-next