GAAI-framework skill-usage-audit
Scan all artefacts (epics, stories, PRDs) for Base Rule #2 compliance — verify that every artefact declares skills_invoked and related_decs in frontmatter. Produces an audit report with pass/fail per artefact and overall compliance rate.
install
source · Clone the upstream repo
git clone https://github.com/Fr-e-d/GAAI-framework
Claude Code · Install into ~/.claude/skills/
T=$(mktemp -d) && git clone --depth=1 https://github.com/Fr-e-d/GAAI-framework "$T" && mkdir -p ~/.claude/skills && cp -r "$T/.gaai/core/skills/cross/skill-usage-audit" ~/.claude/skills/fr-e-d-gaai-framework-skill-usage-audit && rm -rf "$T"
manifest:
.gaai/core/skills/cross/skill-usage-audit/SKILL.mdsource content
Skill Usage Audit
Purpose / When to Activate
Activate:
- Periodically (e.g., after a Discovery session) to verify governance compliance
- Before a release or milestone to audit artefact quality
- When trust in agent compliance needs verification
- On demand by the human (
or direct invocation)/gaai-status
This skill enforces Base Rule #2 (Skill-first) by scanning artefacts for the
skills_invoked attestation field. It detects artefacts that were produced from cached knowledge without reading the corresponding skill file.
Process
-
Scan all Epic files at
(excludecontexts/artefacts/epics/*.epic.md
):_template.epic.md- Check frontmatter for
fieldskills_invoked - If present: verify it includes
generate-epics - If missing: mark as FAIL
- Check frontmatter for
-
Scan all Story files at
(excludecontexts/artefacts/stories/*.story.md
):_template.story.md- Check frontmatter for
fieldskills_invoked - If present: verify it includes
generate-stories - If missing: mark as FAIL
- Check frontmatter for
fieldrelated_decs - If missing: mark as FAIL (separate from skills_invoked)
- Check frontmatter for
fieldepic - If missing: mark as WARN
- Check frontmatter for
-
Produce audit report with:
- Per-artefact pass/fail status
- Compliance rate:
(passing artefacts / total artefacts) × 100 - List of non-compliant artefacts for remediation
- Timestamp of audit
Outputs
Skill Usage Audit Report — {date} Epics scanned: {count} Stories scanned: {count} Non-compliant artefacts: - {id}: FAIL — missing skills_invoked - {id}: FAIL — missing related_decs - {id}: WARN — missing epic field Compliance rate: {n}/{total} ({pct}%) Verdict: CLEAN | {n} VIOLATIONS FOUND
Remediation
For each non-compliant artefact, the human or agent must:
- Read the corresponding skill file (
orgenerate-stories/SKILL.md
)generate-epics/SKILL.md - Verify the artefact content follows all process steps
- Add the missing frontmatter fields
- Commit the fix
This skill does NOT auto-fix artefacts — it reports only. Remediation is a conscious act.
Quality Checks
- Every artefact file in the scan directories is checked (no silent skips)
- Template files (
) are excluded from the scan_template.* - The report clearly distinguishes FAIL (blocking) from WARN (advisory)
- Compliance rate is computed correctly
Non-Goals
This skill must NOT:
- Auto-fix artefacts (report only — remediation is deliberate)
- Check artefact content quality (use
for that)validate-artefacts - Scan non-artefact files (memory, decisions, patterns)