review-claude-files — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited review-claude-files (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
You are the orchestrator for a comprehensive audit and optimization of the project's Claude instruction files (CLAUDE.md, .claude/rules/, .claude/skills/). This workflow mirrors what an Anthropic Senior AI Engineer would do: research current best practices, audit the codebase against them, then plan and execute improvements.
This command runs in three phases. Each phase builds on the previous one's output. Do not skip phases or reorder steps.
Spawn a research agent to find the 2026 (latest) guidance on managing Claude instruction files.
Agent prompt:
Research online the 2026 best practices for managing CLAUDE.md files and .claude/rules/ files in Claude Code projects. Find comprehensive information on:
>
1. How to structure CLAUDE.md files effectively (size targets, what to include/exclude) 2. Best practices for .claude/rules/ directory organization 3. Path-scoped rules via paths: YAML frontmatter — patterns and benefits 4. What belongs in CLAUDE.md vs rules files vs skills vs settings vs hooks 5. Performance/context considerations (line counts, attention degradation, token budgets) 6. Community recommendations and lessons learned from real projects 7. Official Anthropic guidance (code.claude.com/docs) 8. Common anti-patterns (priority saturation, overbroad paths, duplicate content, linter-enforceable prose)>
Search for recent articles, GitHub repos, blog posts, official docs, and community discussions. Return a detailed summary with specific numbers (line limits, recommended file sizes) and sources.
Wait for the research agent to complete before proceeding.
Using the research findings from Phase 1, perform a comprehensive audit of the project's instruction files.
Glob for all .claude/rules/*.md filesGlob for all **/CLAUDE.md files (exclude node_modules/, .claude/worktrees/)Glob for all .claude/skills/*/SKILL.md filespaths: frontmatter (and if so, the paths listed)Spawn an audit agent with the full research findings and file inventory.
Agent prompt:
You are an Anthropic Senior AI Engineer who specializes in Claude Code instruction file optimization. You have deep expertise in how Claude processes CLAUDE.md and rules files, attention degradation in large instruction sets, and the path-scoped rules system.
>
Here are the current best practices from recent research: [INSERT Phase 1 research findings]
>
Here is the complete inventory of instruction files in this project: [INSERT file inventory with line counts, path-scoping status, and content summaries]
>
Perform a thorough audit. For each issue found, classify it as: - CRITICAL: Directly hurts instruction adherence (e.g., 2000+ always-on lines, zero path-scoping) - HIGH: Significant waste or confusion (e.g., 200+ line duplicates, overbroad paths like **/*.py) - MEDIUM: Suboptimal but functional (e.g., workflow-as-rule instead of skill, minor duplication) - LOW: Polish (e.g., linter-enforceable prose, verbose formatting)>
Specifically evaluate: 1. Total always-on load — sum of lines loaded every session regardless of task 2. Path-scoping coverage — which files lack paths, which have overbroad paths 3. Content duplication — same concept explained in multiple files 4. Misplaced content — workflows that should be skills, rules that should be hooks, domain rules in CLAUDE.md 5. File sizes — any file over 200 lines, any CLAUDE.md over the recommended target 6. Stale or contradictory references — cross-references to moved/renamed/deleted files 7. Linter-enforceable rules — rules that pre-commit hooks or CI already catch
>
For each issue, provide: - The specific file(s) affected - Current state (with line counts) - Recommended change - Expected impact (lines saved, files affected)
>
End with a summary table: current always-on load, target always-on load, number of issues by severity.
Wait for the audit agent to complete.
Present the audit findings to the user in a clear summary:
Ask the user: "Here's the audit report. I have [N] improvements planned. Should I proceed with all of them, or would you like to review specific changes first?"
Wait for user confirmation before proceeding to Phase 3.
Based on the audit results and user approval, execute the improvements systematically.
Create tasks for each category of improvement using TaskCreate:
paths: frontmatter to unscoped files, fix overbroad paths.claude/skills/For each task:
in_progressEdit for modifications, Write for new files, Bash rm for deletionscompletedSee \security-auth.md\ for the implementation checklist.services/api/migrations/**) over broad globs (**/*.py). A rule that triggers on every Python file is effectively always-on..claude/skills/{name}/SKILL.md with frontmatter: name, descriptionAfter all tasks are complete:
.claude/rules/, .claude/skills/, and **/CLAUDE.md files. It does NOT modify application code.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.