mastraudit

Installation
SKILL.md

Mastraudit

Use this as a building guide throughout Mastra work. Prevent the expensive mistakes at the point the implementation makes them. The existing name also supports an explicitly requested audit.

Before changing code

  1. Find the runtime owner and the actual version. Resolve packages from the package that calls them, including the CLI, storage and engine adapters. A manifest range, catalog entry or directory listing isn't an installed version. Read that version's embedded docs and types, plus the matching page in a configured local vendor mirror. A recent mirror can still describe a newer release. Use published documentation when local evidence is missing; state the gap.
  2. Read the working precedent. Follow the existing public bridge, storage provider, model policy and domain operation. Identify the execution lane: plain agent, durable workflow, Studio chat, HTTP or stdio MCP. Trace what constructs it and what registration makes public. Read structure for ownership and import changes.
  3. Choose the contract and the bound. Specify the useful output, explicit failure and completion states, references that cross each step, and limits on output, steps, elapsed time and retries. Give an agent the operations it needs to decide; wrapping the whole deterministic workflow can make an agent comparison circular. Read contracts for tools or structured output, and execution for stateful work.
  4. Choose the acceptance path before running it. Name the one changed journey and its observable outcome. Check test/import side effects first. Audit-only scope permits source inspection and safe local checks, not model calls, workflow admissions, storage writes or deployments. Read evidence before tests, evaluations or completion claims.

This is a short implementation decision, not a new planning document. Keep evidence on the owning tracker item when the project uses one.

Reuse an established pre-flight for the same source, installed versions and runtime. Revisit the relevant contract when dependencies, imports, settings or the execution lane change; don't reread settled documentation or rerun a green gate after every save.

While building

Installs
37
Repository
howells/skills
GitHub Stars
5
First Seen
May 21, 2026