Use when assessing AI/ML systems for prompt injection, jailbreak vulnerabilities, model inversion risk, data poisoning exposure, or agent tool abuse. Covers MITRE ATLAS technique mapping, injection signature detection, and adversarial robustness scoring.
aims-audit
aims-audit is an open-source security skill for Claude Code and compatible agents, published by alirezarezvani. Its author describes it as: “/cs:aims-audit <scope> — ISO/IEC 42001 AIMS internal-audit 6-question forcing interrogation. Use before certification stage 1, before annual internal audit cycles, or when onboarding a new AI system into an existing A…”. The project has 25k stars on GitHub and is available under the MIT license. Add it to your setup with `/plugin marketplace add alirezarezvani/claude-skills`.
What aims-audit does
**Command:** `/cs:aims-audit `
Installation
Add aims-audit to your agent with:
/plugin marketplace add alirezarezvani/claude-skillsAlways review a skill's source before installing it. This command comes from the skill's public repository; the linked repo is the source of truth for exact setup steps.
What's inside
The SKILL.md for aims-audit is organised into these sections:
- When to Run
- The Six AIMS Questions
- 1. Does the AIMS scope statement name every AI system?
- 4. Has the AI risk assessment been re-run since the last material model change?
- 6. Has the AIMS been integrated with existing ISMS / QMS, or built in parallel?
- Workflow
- Output Format
- Routing
- Related
When to use it
Reach for aims-audit when you want security help from your agent without writing the same instructions every session. Load the skill and the agent picks it up automatically for relevant tasks.
Strengths
- Clear MIT license — safe to read and adapt
- Ships in alirezarezvani/claude-skills, an established project with 24,617 GitHub stars
- Actively maintained (recent commits)
Topics
Frequently asked questions
- What does aims-audit do?
- /cs:aims-audit <scope> — ISO/IEC 42001 AIMS internal-audit 6-question forcing interrogation. Use before certification stage 1, before annual internal audit cycles, or when onboarding a new AI system into an existing AIMS.
- How do I install aims-audit?
- Run /plugin marketplace add alirezarezvani/claude-skills in your agent, then reload your skills. Review the source at https://github.com/alirezarezvani/claude-skills before installing.
- Is aims-audit free to use?
- Yes. aims-audit is free and open source under the MIT license, so you can read, run, and adapt it within that license's terms.
- Where does aims-audit come from?
- aims-audit ships inside alirezarezvani/claude-skills, a repository that contains 41 catalogued skills in total. The repository's 24,617 GitHub stars apply to that whole collection, not to this skill on its own.
Related skills
More Security →Audits and designs iOS/macOS/watchOS/visionOS interfaces against the Apple Human Interface Guidelines, including the Liquid Glass design language (announced WWDC25, shipped with iOS 26/macOS Tahoe, Sept 2025). Use when reviewing an Apple-platform mockup or app for HIG compliance, checking contrast or tap-target sizes, or designing native-feeling Apple UI (e.g., 'audit my iOS app against the HIG', 'is this text readable on Liquid Glass?').
Master smart contract security best practices to prevent common vulnerabilities and implement secure Solidity patterns. Use when writing smart contracts, auditing existing contracts, or implementing security measures for blockchain applications.
Audits GitHub Actions workflows for security vulnerabilities in AI agent integrations including Claude Code Action, Gemini CLI, OpenAI Codex, and GitHub AI Inference. Detects attack vectors where attacker-controlled input reaches. AI agents running in CI/CD pipelines.
Audit local AI coding-agent sessions with agenttrace for cost, tool failures, latency, anomalies, health, diffs, and CI gates.