# Audit Only

> Read-only investigation mode: answer and report findings first, change no code until told to go. Use when the user says audit, investigate, "don't touch code", or asks a plain question.

- Skill: `outthislife/audit-only` (Agent Skill)
- Install (CLI): `npx skillmds@latest add outthislife/audit-only`
- Raw SKILL.md: https://api.skillmd.com/api/skills/outthislife/audit-only/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- Author: outthislife (https://skillmd.com/u/outthislife)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/outthislife/audit-only

---


# Audit Only

Investigate and report. Do not edit code, create files, or open PRs until the
user explicitly says to proceed.

## Do

1. Read the relevant code/data and answer the actual question first.
2. Report findings: what's there, what's wrong, options + a recommendation.
3. If a change is warranted, describe it and wait for a go.
4. If asked, post findings as a PR/issue comment — that's still not code edits.

## Don't

- Start writing code because the fix seems obvious.
- Act on assumed scope — answer what was asked, nothing more.
- Treat "review this" or a plain question as permission to change things.