Claude Skills · Code Review & Testing
Iterative Converging Audit
JKHeadley/instarRun any "find all instances of X" sweep — a security audit, a safety audit, a code review, a research question, a compliance check — as an iterative loop that does NOT stop at one pass. Audit → fix → RE-audit → … until a clean pass returns zero NEW discoveries. Use whenever thoroughness matters and a single pass would miss things. Trigger words: audit, sweep, find all, review everything, comprehensive, thorough, exhaustive, security review, safety audit, no stone unturned, did we get everything, convergence.
At a glance
This skill is for Code Review & Testing and helps you run a comprehensive security audit, perform an iterative code review, and conduct a thorough compliance check.
git clone --depth 1 https://github.com/JKHeadley/instar
cp -r instar/skills/iterative-converging-audit ~/.claude/skills/iterative-converging-audit
Setup, runtime and requirements describe JKHeadley/instar, the repo this skill ships in.
securityauditIterativeSweepThoroughnessConvergence
Also in JKHeadley/instar
View the repoSet up persistent agent identity files (AGENT.md, USER.md, MEMORY.md) and teach the agent to read them at every session start. Works in any...
Teach cross-session memory patterns using MEMORY.md — what to save, how to organize it, how to maintain it over time, and how to structure t...
View this agent's digital passport (identity + trust + allowed/forbidden actions) and verify a peer's passport against a proposed action (EX...
Score a task or workflow on its coordination-vs-judgment ratio to tell whether it's a good agent candidate (EXO 3.0 task-decomposition matri...
Set up a PreToolUse hook in .claude/settings.json that blocks dangerous commands — rm -rf, force push, database drops, and others — before t...
PostToolUse hook that scans Bash tool output for leaked credentials — API keys, tokens, private keys, and secrets — before they reach the co...
Instar-specific development skill used by the instar-developing agent (Echo, or any agent assigned instar-dev responsibilities). Wraps /buil...
Submit structured feedback about instar bugs, feature requests, improvements, or innovations worth sharing. Use when something isn't working...
Establish and recover persistent agent identity that survives context compaction, session restarts, and autonomous operation. Use when an ag...
Schedule recurring agent tasks using cron expressions. Use when the user asks to run something on a schedule, check something periodically,...
Spawn, monitor, and communicate with persistent Claude Code sessions running in the background. Use when a task needs to run without blockin...
Send and receive messages via Telegram for two-way agent communication. Use when the agent needs to notify the user, alert them about someth...
Other Code Review & Testing skills
A relentless interview to sharpen a plan or design, which also creates docs (ADR's and glossary) as we go.
Use when you need to resolve an in-progress git merge/rebase conflict.
Create exercise directory structures with sections, problems, solutions, and explainers that pass linting. Use when user wants to scaffold e...
Migrate test files from `as` type assertions to @total-typescript/shoehorn. Use when user mentions shoehorn, wants to replace `as` in tests,...
Move issues and external PRs through a state machine of triage roles — categorise, verify, grill if needed, and write agent-ready briefs.
A relentless interview that asks every frontier question at once, round by round.