Skip to content
Back to skills

Assumption Audit

ASecurity

Use when a plan relies on guessed paths, versions, APIs, user state, defaults, environment behavior, or undocumented facts.

  • 5 stars
  • 0 votes
  • 0 copies
  • 1 view
  • Added September 3, 2026
ai-agentsdebuggingapi

Works with

  • api

Security analysis

A100/100

Scanned September 3, 2026

npx -y skills add ShugokiFable/Ultimate-AI-Starter-Bundle --skill assumption-audit --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Assumption Audit?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Assumption Audit
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/shugokifable-assumption-audit/badge)](https://www.skillsdirectory.com/skills/shugokifable-assumption-audit)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: assumption-audit
description: Use when a plan relies on guessed paths, versions, APIs, user state, defaults, environment behavior, or undocumented facts.
---

# Assumption Audit

## Core rule
Every material **assumption** must become a verified fact, an explicit inference, or an **unknown** before it can support an irreversible decision.

## Audit
List assumptions that could change correctness: path existence, provider behavior, version semantics, file format, permissions, network availability, user intent, current branch, generated state, and external service status.

For each:
- **verify** from the authoritative source when cheap;
- isolate it behind a runtime check when environment-dependent;
- provide a safe fallback when absence is expected;
- state it as unknown when it cannot be proved.

Prioritize assumptions by blast radius, not by convenience. A guessed path used in one log line matters less than a guessed path written into five provider configs.

## Then route it
Naming an assumption is half the job; the other half is the cheapest thing that settles it. `research-verification` for an external or version-specific fact, `visual-verification` for anything about appearance, `systematic-debugging` for a failure, `observability-first` when nothing in the system can currently answer the question at all, `capability-routing` when the assumption is that you have to build something to find out.

## Red flag
If the sentence “this should exist/work because it usually does” appears in your reasoning, turn it into a check.

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…