跳到主要内容
知仓学习社ZHICANG

red-handed-audit

Check whether the tests the agent said passed actually ran. Reads the Claude Code session transcript and git state locally, then reports each gap wi…

不碰外部(只输出文字)无严重或高危命中davepoon/buildwithclaude

它会碰到什么

扫了多少1 个文本文件,2 KB
它会碰到什么不碰外部(只输出文字)
命中总数0 处
命中统计严重 0 · 高 0 · 中 0 · 低 0

这一栏是扫描器报的事实,不是结论。命中多不等于有毒(安全工具、规则库、示例脚本本来就会包含危险写法),命中少也不等于干净。它和你手上的凭据、文件、网络有什么关系,需要你自己看。

技能内容

Red-handed Audit

Audit the current session's claims against its own record. If the agent said the tests pass, this checks that a test run actually happened, that it did not fail, and that no expected value was quietly rewritten to match a bug.

When to Use This Skill

  • The agent reported passing tests and you want to confirm a run actually happened
  • A test suite got smaller and you want to know when and why
  • You are reviewing a finished session before trusting its summary

What This Skill Does

  1. Runs npx --yes @jinhyuk9714/red-handed@latest audit in the project directory
  2. The CLI reads the local Claude Code transcript and the git working tree
  3. Nine deterministic checks compare what was said with what was done
  4. Each finding comes with a timestamp and the quoted line it came from

No model is called. The same session gives the same verdict every time.

How to Use

Basic Usage

Audit this session. Did the tests I was told about actually run?

The skill runs:

npx --yes @jinhyuk9714/red-handed@latest audit

Useful variations:

npx --yes @jinhyuk9714/red-handed@latest audit --all      # every session for this project
npx --yes @jinhyuk9714/red-handed@latest stats            # counts across the whole machine
npx --yes @jinhyuk9714/red-handed@latest audit --lang ko  # report in Korean

Example

User: "Before I merge this, check whether the tests really ran."

Output:

CAUGHT  claim-vs-fail
  14:02:31  "All 33 tests pass."
  14:01:58  npx vitest run … exit 1, 2 failed
  The last run before the claim failed. Nothing ran after it.

A clean session prints nothing to accuse. That is the common case.

Tips

  • CAUGHT needs two things at once: the session shows it happening and the code still shows it now
  • SUSPICIOUS means the pattern is there but the motive is not established
  • Verification the tool cannot read counts as verification it did not see, so browser tests and custom scripts only ever reach SUSPICIOUS
  • Exit code 1 means findings at the CAUGHT tier. That is the tool working, not an error

想直接用这个技能?

本站把开放许可(MIT / Apache 等)的技能按仓库打包整理到网盘,点一下转存到你自己的网盘,不用一个个从 GitHub 拉。许可未声明的技能只给原始仓库链接,不打包。

它属于哪个仓库

星标★ 3,470
本站分层T1
该仓技能数381
原文件路径plugins/all-skills/skills/red-handed-audit/SKILL.md

同一个仓库里的其他技能

看这个仓库的全部 381 个技能