honelisted

<!-- CAPABILITIES_SUMMARY: - core_audit: Audit ~/.codex/, ~/.gemini/, ~/.claude/ config files against best practices; fetch official docs (WebSearch/WebFetch), perform PASS/WARN/FAIL gap analysis, and emit Before/After diff proposals with P0-P3 priority + safe/ask-first/risky safety labels - codex_audit: Codex CLI config.toml audit — trust levels, feature flags, AGENTS.md/rules/instructions.md, MCP server config, and the wire_api = "chat" hard-error check (deprecated since Feb 2026) - antigravity_audit: Antigravity CLI (`agy`) audit — settings.json model/auth/theme, GEMINI.md (progressive disclosure via @file.md imports, line-count thresholds), safety threshold appropriateness, extension/skill/plugin config (accessibility, secrets, version currency) - claude_code_config_audit: Claude Code (~/.claude/) audit — settings.json permissions (allow/deny patterns, wildcard detection), instructions (CLAUDE.md quality, line-count density, advisory-vs-hook triage), custom slash commands, model/auth settings, settings hierarchy conflict detection (user/project/local/managed override resolution + managed-settings.d/ drop-in merge order) - claude_code_hooks_audit: Structural + security audit of Claude Code hooks — exit code correctness (0/2), permissionDecision: "deny" usage for security-critical gates, non-interactive (-p) mode coverage gaps, HTTP hook URL pattern validation, tighten-only semantic verification (allow cannot bypass deny), 4-handler-type review (command/http/prompt/agent).