audit-rules
Audit Rules Command
Audit Claude Code rule files (.claude/rules/*.md) for quality and compliance.
Initialization
Before auditing, initialize the environment:
- Get the current UTC date for audit timestamps.
- Capture the project root path for subagent communication.
- Ensure the temp directory (
.claude/temp/) exists. - Clean up any stale audit files if the user confirms.
The memory-management skill provides authoritative validation guidance for rules (auto-loaded when this command runs).
What Gets Audited
- YAML frontmatter structure (description, globs)
- Glob pattern validity and syntax
- Rule file naming conventions
- Content structure and clarity
- Path-specific rule applicability
Command Arguments
| Argument | Description |
|---|---|
| (none) | Audit all discoverable rule files |
--force |
Audit regardless of modification status |
--skip-validation |
Skip finding validation (faster, but may include false positives) |
Step 1: Discover Rule Files
Search for rule files in:
- Project rules (
.claude/rules/*.md) - User rules (
~/.claude/rules/*.md)
Build a list of discovered rule files with their scope (project or user) and full path.
If no rule files are found, report this and provide guidance on how to create one.
Step 2: Parse Arguments
Check if the --force flag is present in the command arguments. Build the audit queue based on discovered files and the force flag.
Step 3: Present Audit Plan
Display audit mode (SMART or FORCE), rule files discovered, and list each with scope and last modified date.
Step 4: Execute Audits
For each rule file, spawn the memory-component-auditor subagent with the following context:
- Scope (project or user)
- Full path to the rule file
- Last audit date or "Never audited"
- Current audit date
- Project root path
Run subagents in parallel when multiple rule files exist.
Subagents write findings to .claude/temp/ as both JSON (for recovery/aggregation) and markdown (for human review). The main conversation thread collects results and updates audit logs using its Write/Edit tools.
Step 4.5: Validate Findings
Unless --skip-validation flag is present:
- Spawn the
audit-finding-validatoragent with:project_root: The captured project root pathaudit_type: "rule"audit_files: List of.claude/temp/audit-*-rule-*.jsonfile paths
- Wait for validation to complete
- Read updated JSON files with validation results
- Filter out FALSE_POSITIVE findings completely before aggregation
- Note: Filtered findings are logged to
.claude/temp/audit-filtered-findings.json
If --skip-validation flag is present:
- Skip validation phase entirely (current speed preserved)
- Present all findings without filtering
- Note in summary: "Validation: Skipped"
Step 5: Final Summary
Report total rule files audited, results by scope, and details table. List frontmatter or glob pattern issues with remediation steps.
Include validation statistics (if validation was performed):
- Validation performed: Yes/No
- Findings validated: X
- False positives filtered: Y
- Verified findings: Z
- Unverified findings: W
Important Notes
Rule File Requirements
Rule files must have valid YAML frontmatter with description and optionally globs fields. The globs field controls which files the rule applies to.
Rule File Locations
| Location | Purpose |
|---|---|
.claude/rules/*.md |
Project-specific rules |
~/.claude/rules/*.md |
User-wide rules |
Glob Pattern Syntax
Rules can use glob patterns to apply only to specific files:
---
description: TypeScript coding standards
globs: ["**/*.ts", "**/*.tsx"]
---
Audit Log Location
All audit results are written to .claude/audit/rules.md.
Use /audit-log rules to view current audit status.
Example Usage
Example 1: Audit All Rule Files
User: /audit-rules
Claude: Discovering rule files...
## Audit Plan
**Mode**: SMART
**Rule files discovered**: 3
1. [project] .claude/rules/typescript.md
2. [project] .claude/rules/security.md
3. [user] ~/.claude/rules/personal-style.md
[Spawns memory-component-auditor subagents]
## Audit Complete
| Scope | Rule File | Result | Score |
| --- | --- | --- | --- |
| project | typescript.md | PASS | 100/100 |
| project | security.md | PASS | 95/100 |
| user | personal-style.md | PASS WITH WARNINGS | 82/100 |
Example 2: Force Audit
User: /audit-rules --force
Claude: Auditing all rule files (force mode)...
More from melodic-software/claude-code-plugins
design-thinking
Design Thinking methodology for human-centered innovation. Covers the 5-phase IDEO/Stanford d.school approach (Empathize, Define, Ideate, Prototype, Test) with workshop facilitation and exercise templates.
191plantuml-syntax
Authoritative reference for PlantUML diagram syntax. Provides UML and non-UML diagram types, syntax patterns, examples, and setup guidance for generating accurate PlantUML diagrams.
161system-prompt-engineering
Design effective system prompts for custom agents. Use when creating agent system prompts, defining agent identity and rules, or designing high-impact prompts that shape agent behavior.
141architecture-documentation
Generate architecture documents using templates with diagram integration. Use for creating C4 diagrams, viewpoint documents, and technical overviews.
126data-modeling
Data modeling with Entity-Relationship Diagrams (ERDs), data dictionaries, and conceptual/logical/physical models. Documents data structures, relationships, and attributes.
101resume-optimization
Resume structure, achievement bullet formulas, ATS optimization, and job-targeted tailoring for software engineers. Use when reviewing resumes, crafting achievement bullets, extracting keywords from job descriptions, or tailoring content for specific roles.
93