ak audit scripts

ak audit scripts

Audit local kit hook and skill scripts

Synopsis

What it does: Read-only advisory audit for local AgentKit hook scripts and skill scripts. It scans file text for language, dependencies, entrypoints, and heuristic risk findings. It never executes scripts and does not block installs.

Who it's for: Power devs and maintainers reviewing local or bundled kit scripts.

When to use it: Run before installing or updating kits, or in CI to inspect advisory risk changes.

Examples: ak audit scripts --json ak audit scripts ./kits/engineer ./kits/core --json ak audit scripts ~/.claude/plugins/ak-engineer --no-interactive

What changes on disk: Read-only. Bounded local file reads only; no network calls and no script execution.

Output modes: pretty default on TTY (colors, ASCII markers) plain auto when stdout piped or --no-interactive json --json (single-object envelope, NDJSON-safe)

Exit codes: 0 success 1 runtime error 2 invalid flags 3 user-cancel (SIGINT, prompt-cancel) 1 scan failed (missing path, unreadable file, invalid root) 2 invalid flags

ak audit scripts [path...] [flags]

Options

  -h, --help                 help for scripts
      --json                 Emit machine-readable JSON (implies --no-interactive)
      --max-file-bytes int   Maximum bytes to read per script file
      --no-interactive       Disable interactive prompts (CI-safe)
  -q, --quiet                Suppress non-error output on stderr
  -V, --verbose              Extra diagnostic output on stderr (loses to --quiet)
  -y, --yes                  Assume yes for all prompts

SEE ALSO

• ak audit - Check installed kits for drift