Audit Flow
Traces system flows across code, API, auth, data, and network layers with Mermaid export.
Test report
- Verdict
- Works with setup
- Score
- Tested
- Jul 12, 2026
- Environment
- Claude Code 2.x (agent harness)
- Upstream re-checked
- Aug 10, 2026 · be98f26
Verbatim git-clone install worked with zero fixes and the stdlib-only Python CLI ran the full DB-first workflow (init, SQL inserts, validate, Mermaid/markdown export) on a toy login handler with no external dependencies. In the A/B, the skill produced a valid 12-node branching flow trace backed by SQLite persistence and a validate step, but the resulting audit was essentially the same quality as the base arm's ad-hoc analysis (same layers, same branch points, comparable findings), so the methodology overhead did not yield a materially better trace on a small task. Docs gap: SKILL.md's Files list and Git Workflow section reference a .gitattributes merge-driver file as 'already in repo', but that file does not exist in the cloned repo, and the Quick Reference lists /audit-flow slash-commands that are not real CLI subcommands.
Scored on four weighted criteria — install, triggering, output vs. baseline, docs. How scoring works
- Installs cleanly 4/5
- Triggers reliably 3/5
- Output vs. baseline 5/10
- Docs & honesty 3/5
What Audit Flow does
Interactive system flow tracing across CODE, API, AUTH, DATA, NETWORK layers with SQLite persistence and Mermaid export. Use for security audits, compliance documentation, flow tracing, feature ideation, brainstorming, debugging, architecture reviews, or incident post-mortems. Triggers on audit, trace flow, document flow, security review, debug flow, brainstorm, architecture review,…
How to install Audit Flow
git clone https://github.com/zebbern/claude-code-guide
cd claude-code-guide
mkdir -p ~/.claude/skills
cp -r skills/audit-flow ~/.claude/skills/audit-flow
Skills live in ~/.claude/skills/ (global) or .claude/skills/
(per-project). Restart Claude Code after installing.
Commands — how to trigger Audit Flow
-
/audit-flowTraces system flows across code, API, auth, data, and network layers with Mermaid export.
It also activates on plain-language prompts like these:
-
Trace how this auth flow moves through the system -
Document this data flow for our compliance review -
Do a security audit of this API request flow
Frequently asked questions
- Is the Audit Flow skill free?
- Yes. The skill itself is free from zebbern/claude-code-guide. SkillProof publishes the install command and an independent test verdict at no cost.
- Does Audit Flow work with Claude Code?
- We tested it with Claude Code 2.x (agent harness) on Jul 12, 2026. Verdict: Works with setup. Verbatim git-clone install worked with zero fixes and the stdlib-only Python CLI ran the full DB-first workflow (init, SQL inserts, validate, Mermaid/markdown export) on a toy login handler with no external dependencies. In the A/B, the skill produced a valid 12-node branching flow trace backed by SQLite persistence and a validate step, but the resulting audit was essentially the same quality as the base arm's ad-hoc analysis (same layers, same branch points, comparable findings), so the methodology overhead did not yield a materially better trace on a small task. Docs gap: SKILL.md's Files list and Git Workflow section reference a .gitattributes merge-driver file as 'already in repo', but that file does not exist in the cloned repo, and the Quick Reference lists /audit-flow slash-commands that are not real CLI subcommands.
- What is the Audit Flow SkillProof Score?
- 6.0/10 — installs cleanly 4/5, triggers reliably 3/5, output vs. baseline 5/10, docs & honesty 3/5.
- How do I install Audit Flow?
- Copy the install command from this page, run it in your terminal, and restart Claude Code. Skills live in ~/.claude/skills/ (global) or .claude/skills/ inside a project.
- Can I use Audit Flow with Cursor, Copilot, Gemini CLI, Codex or other AI tools?
- The SKILL.md format is native to Claude (Claude Code, Desktop, claude.ai). The instructions inside adapt to other assistants: Cursor rules, GitHub Copilot instructions, Windsurf rules, Custom GPTs, AGENTS.md for OpenAI Codex, and GEMINI.md for Google Gemini CLI — our conversion guides cover each, and the free converter on the tools page does the wrapping for you.