1---2name: skill-engine-audit3description: Use when auditing, grading, benchmarking, or conforming an entire skills engine. Measures taxonomy, doctrine, contracts, depth, routing, safety, references, output readiness, and normalisation priorities.4---56# Skill Engine Audit7Acknowledgement: Shared by Peter Bamuhigire, techguypeter.com.89<!-- dual-compat-start -->10## Use When1112- Asked to AUDIT, grade, benchmark, rank, or find gaps in a whole skills engine / skill catalog13 (not a single skill — for one skill's safety use `skill-safety-audit`).14- Deciding whether an engine is "world-class" and what to add/harden to get there.15- Producing a comprehensive, ranked, evidence-based report on an engine's quality and coverage.1617## Do Not Use When1819- Auditing ONE skill for unsafe/malicious instructions → use `skill-safety-audit`.20- Auditing produced artifacts (a website/app/document) for AI slop → use the design engine's21 `ai-slop-typography-audit` / `visual-product-slop-audit`.22- Writing or routing a new skill → use `skill-writing` / `skill-taxonomy-and-routing`.2324## Required Inputs2526- The engine's path(s) and what it is FOR (its domain and the OUTPUT TYPES it must produce —27 e.g. websites, iOS/Android/web apps, cross-platform apps, documents, proposals, presentations,28 brand systems, data products). The output-type list drives the readiness audit.29- The BAR to grade against (default: world-class / top 0.1% of the relevant domain).3031## Workflow32330. **Inventory compliance first.** For conformance work, run `scripts/engine_compliance.py`34 before reading individual skill bodies. Use its compact exception register to minimise context loading.35 Also run the repository's source-ingestion guardrail and block the audit on36 raw ebooks, large book-extraction files, or likely reconstructive full text.371. **Scope it.** Read the engine's router(s) (`README.md` / `CLAUDE.md` / `AGENTS.md`) and its38 doctrine. Glob `skills/**/SKILL.md` to list every group and skill. Identify the output types39 the engine is responsible for (audit ALL of them — web, iOS, Android, web apps, cross-platform,40 websites, documents, presentations, brand, data products, handoff — whichever apply).412. **Lock the rubric.** Use `references/scoring-rubric.md`. The bar is the top 0.1% of the domain.42 **Default scores 45–65; any 70+ needs extraordinary, specific justification. If tempted to43 score 70+, you were not strict enough — find what is missing.** Every score is justified with44 concrete deficiencies, never vibes. For product audits, also load45 `references/engine-and-product-audit-evidence-matrix.md` and score the46 engine-to-output chain, not only repository structure.473. **Fan out parallel audit agents** (see `references/parallel-agent-method.md`) — one per concern,48 so strict scores emerge independently before synthesis. Standard fleet:49 (a) **standards benchmark** — what world-class looks like NOW for this domain, cited via a50 research engine under a no-hallucination rule; (b) **existing-skills audit** — read every51 SKILL.md, score each skill + group; (c) **taxonomy & gap analysis** — is the structure52 sufficient/exhaustive/balanced, what's missing; (d) **per-output-type readiness** — score each53 output type the engine must produce; (e) **hardening plan** — concrete `references/*` +54 `examples/*` to add; (f) **reading/source list** — material to buy and extract, cited.554. **Rank every aspect** using the dimension list in `references/audit-dimensions.md` (taxonomy,56 doctrine, skill depth, worked examples, standards currency, output coverage, accessibility,57 production/handoff, redundancy/hygiene, discovery/routing, safety). Each /100.585. **Synthesize** the connective verdict: executive summary, methodology, master scorecard59 (every dimension + group + output type + the overall engine score /100), and a phased roadmap.606. **Write the report** as a multi-file set under `docs/initial-analysis/` (or a named audit61 folder) following `references/report-structure.md`. One concern per file; a README index.627. **Make it actionable** — the roadmap must list specific new skills (with priority P0/P1/P2),63 hardening moves (named files), and the target score after each phase.6465## Quality Standards6667- Strict and evidence-based: every score cites concrete, named deficiencies.68- Comprehensive: ALL output types the engine touches are scored, none skipped.69- Cited where external: standards/benchmarks/reading verified under a no-hallucination rule.70- Actionable: ends with a prioritized roadmap and a believable target score per phase.71- Reproducible: the rubric and dimensions are fixed references, so re-audits are comparable.72- Rights-aware: source provenance is recorded, raw books are absent, and73 book-informed skills contain independent operational synthesis rather than a74 substitute for the source.7576## Anti-Patterns7778- Grading on vibes, or inflating scores (70+ without extraordinary justification).79- Auditing only the skills that exist while ignoring what's MISSING (coverage gaps).80- Skipping output types ("we only checked web") — audit every aspect the engine is for.81- A single monolithic opinion instead of independent parallel concerns + synthesis.82- A report with scores but no roadmap, or a roadmap with no target numbers.83- Treating committed book/OCR dumps as harmless research evidence.8485## Outputs8687- A `docs/<audit>/` folder: executive summary, methodology+rubric, per-group audit, taxonomy &88 gap analysis, per-output-type readiness, standards benchmark, hardening plan, reading list,89 master scorecard (overall engine /100), and a phased roadmap to the bar.9091## References9293- `references/compliance-normalisation-workflow.md` - reusable, token-efficient conformance process.94- `scripts/engine_compliance.py` - read-only inventory by default; narrowly scoped safe fixes with `--fix-safe`.95- `references/scoring-rubric.md` — the strict bar and bands.96- `references/audit-dimensions.md` — every aspect to rank + the output-type checklist.97- `references/parallel-agent-method.md` — the audit-agent fleet and how to brief it.98- `references/report-structure.md` — the multi-file report template.99- Sibling skills: `skill-safety-audit`, `skill-writing`, `skill-taxonomy-and-routing`,100 `ai-slop-audit`.101## Inputs102103| Artefact | Required? | Purpose |104|---|---|---|105| Engine router and policies | yes | Establish scope and local rules |106| Active skill roots | yes | Define the audited catalogue |107| Compliance bar | yes | Keep re-audits comparable |108109## Evidence Produced110111| Category | Artifact | Format | Example |112|---|---|---|---|113| Release evidence | Engine compliance report | Scanner summary or JSON exception register with before/after counts | `engine-compliance.json` |114| Correctness | Normalisation evidence pack | Validator, routing, safety, diff, and remaining-exception results | `docs/audits/<engine>/evidence.md` |115116<!-- dual-compat-end -->117118## Capability contract119120Read and search are required. Execution is optional but preferred for scanners and validators. Editing requires an explicit conformance request; network research is separate and source-disciplined.121122## Decision rules123124| Condition | Action | Failure avoided |125|---|---|---|126| Structural question spans the catalogue | Run machine inventory first | Token-heavy manual reading |127| Safe syntax defect has deterministic repair | Use `--fix-safe`, then inspect diff | Repetitive manual edits |128| Contract or domain judgement is missing | Normalise individually | Fabricated boilerplate compliance |