repo-compliance-auditlisted
Install: claude install-skill hsb3/dotfiles-agents
# Repo compliance audit
Resolve `<plugin-root>` to the installed package directory containing this skill's `skills/`
parent, using the loaded skill's absolute path. Do not assume a shell variable is set by the
client. Substitute that absolute path in the commands below; both Claude Code and Codex can
run them from the target repository.
The rollout's measuring instrument: one command, a pass/gap table, exit 0 either way.
The output IS the compliance checklist — do not maintain a separate tracking document.
## How to run
From the **audited repo's root** (the script resolves the git toplevel of the cwd):
```bash
python3 "<plugin-root>/skills/repo-compliance-audit/scripts/audit.py" --plugin-root "<plugin-root>"
```
The explicit `--plugin-root` locates the checklists without client-specific environment.
When supplied, `$CLAUDE_PLUGIN_ROOT` remains the legacy default. The package must contain
`skills/repo-meta-structure/references/checklist.md` and
`skills/project-memory/references/checklist.md`.
Then **present the table verbatim** (fenced code block), including the summary line.
Do not re-derive, filter, or re-score rows yourself — the script is the instrument.
## Hard rules
- **NEVER write to the audited repo during an audit.** No fixes, no scaffolding, no
manifest creation, no "quick cleanups" — even if gaps look trivial. Fixing gaps is the
mise-en-place scaffold skill's job (audit → scaffold → re-audit loop).
- **Reports, never polices.** Gaps do not make the run