Claude Code Setup Audit

A periodic health check for your Claude Code environment, not your codebase. Catches token bloat, accumulated drift, and security exposure that a normal code review will not see.

This skill checks Claude Code config only. Code health belongs in a normal code review or refactor pass, not here.

Read-only by default. This skill analyzes and reports. It does not edit settings.json, CLAUDE.md, or any skill files. The user reviews findings and acts.

When to Use

• Monthly maintenance (default cadence)
• After each Claude Code version bump — CVEs are version-specific
• Before a client handoff (leaked secrets would be a very bad day)
• After clicking "Yes, don't ask again" repeatedly across a week of work
• When Claude starts "ignoring" a CLAUDE.md rule (usually a symptom of bloat)
• After installing any community skill, plugin, or MCP server (supply-chain check)

Step 0: Cadence Check