MCPInstall

audit

Audit or critique a product flow, journey, workflow, funnel, onboarding path, checkout path, settings path, screen, or multi-step product experience by capturing screenshots first, then reporting UX, design, and accessibility findings inline from that evidence. Use Figma only when the user explicitly asks for a board. Use when the user asks to audit, review, critique, inspect, assess, analyze, evaluate, or give feedback on a product experience.

Installs
65
Last 24h
—
Trending rank
—
Security
Not audited

Install

Works with every agent the skills CLI supports.

npx skills add https://github.com/openai/role-specific-plugins --skill audit
  1. 01

    Install

    Run the command in your project. The CLI asks which agents to install for.

  2. 02

    Describe the task

    Ask your agent for something this skill covers. It loads audit automatically when relevant.

  3. 03

    Review the result

    The agent follows the SKILL.md steps, scripts and references bundled with the skill.

SKILL.md

The instructions your agent reads when the skill is triggered.

Audit

Use this skill when the user wants to audit, review, critique, inspect, assess, analyze, evaluate, or give feedback on a product flow, journey, funnel, onboarding path, checkout path, settings path, screen, or other product experience.

The output is not a loose opinion. The output is:

  • Screenshots of the flow
  • Those screenshots rendered inline in the report
  • A numbered step list
  • UX and design findings tied to steps or screenshots
  • Accessibility risks tied to steps or screenshots
  • Clear limits on what could not be checked from screenshots alone

Critical Overrides

  • Refer to the Plugin router $index before proceeding.
  • Follow $critical-overrides.

User Context

Before starting, load $user-context and run its preflight script when local shell access is available.

Use saved product URLs, Figma files, screenshots, reference images, codebase paths, Storybook, tokens, design systems, brand assets, component refs, browser preferences, and share targets as grounding material when relevant.

Do not inspect every saved reference. Inspect only what the current task needs.

Route

Before auditing:

  1. Identify the product or surface.
  2. Identify the flow or task.
  3. Choose the capture tool.
  4. Capture the flow.
  5. Save and inspect each screenshot.
  6. Return the audit inline with the accepted screenshots.

Output rules:

  • Default to a concise inline report with screenshots rendered in the chat.
  • Saving screenshots and notes in the workspace is an internal implementation detail. Do not ask the user to choose a local folder.
  • If the user explicitly asks for Figma, create the Figma audit board in addition to the inline report.
  • After the inline report, ask once: Want me to plot this out in Figma with the screenshots and notes?

Capture rules:

  • Follow the Browser Choice rule in $index.
  • If none of those can capture valid screenshots or control the flow, stop and report the blocker.

Browser capture order:

  1. Load the Browser skill before browser work.
  2. Connect to the browser and use the current tab when it already shows the target.
  3. Do not reload or navigate away unless the audit needs a fresh start.
  4. Observe the visible state before acting.
  5. Before each click, type, or key press, use the latest DOM snapshot to target one clear control.
  6. After each action, take the cheapest fresh check that proves what changed: DOM for structure, screenshot for visual state.
  7. Save and inspect the accepted screenshot before using it as audit evidence.

Figma rules:

  • If Figma is the destination, load the required Figma skills before creating or editing the file.
  • Keep a local copy of every screenshot even when Figma succeeds.
  • Do not upload a screenshot to Figma until the saved local file has been inspected and accepted.
  • Figma is not done until the screenshots are visibly placed in the Figma output.
  • After placing screenshots in Figma, render or inspect the board and confirm every flow step has the correct screenshot visible in the correct card.
  • If an image is missing, misplaced, blank, or only uploaded as an unused asset, fix it before handoff.
  • If Figma tools cannot create files or place images, return the inline audit and explain the missing Figma capability.

Evidence rules:

  • Use only evidence captured in the current audit run.
  • Do not use memory, prior chats, old traces, cached screenshots, or prior generated artifacts as audit evidence unless the user explicitly provides them.
  • Do not audit until the product, flow, and capture tool are known.
  • Do not claim full accessibility compliance from screenshots alone.

Capture And Audit The Flow

You are an expert design, UX, and accessibility auditor. For each step in the flow, capture what the user sees, observe how the screen behaves, inspect the screenshot, and write audit notes before moving on.

Follow references/design-audit-framework.md when deciding what to inspect and how to describe strengths, UX issues, accessibility risks, limits, and recommendations.

Screenshot source rule:

  • Use the screenshot you actually saw.
  • Save that exact screenshot to the local audit folder.
  • Open or inspect the saved file before accepting it.
  • If the saved file shows the wrong window, wrong state, blank page, crop, or loading screen, reject it and capture again.
  • When Figma is the destination, upload that accepted local file.
  • After upload, verify the Figma board shows the same step.
  • Do not replace a Browser, Chrome, or Computer Use screenshot with an OS screenshot unless you first prove the saved file shows the same window and state.

For every step:

  1. Move to the next step in the requested flow.
  2. Wait until the screen is loaded and visually stable.
  3. Check for loading spinners, blank areas, login walls, error pages, blocked states, cookie dialogs, and half-rendered content.
  4. Capture the screenshot.
  5. Inspect the screenshot before accepting it.
  6. Reject the screenshot if it is blank, loading, cropped, blocked, or showing the wrong state.
  7. Observe behavior that matters for the audit, such as navigation, focus, loading, validation, error handling, empty states, motion, and whether the next action is clear.
  8. Write notes for that step.
  9. In the notes, report strengths, UX issues, accessibility risks, and any limits that made the step difficult to audit.
  10. Save accepted screenshots with numbered names, such as 01-start.png, 02-form-filled.png, and 03-confirmation.png.
  11. Inspect the saved screenshot file before upload or handoff.
  12. Keep each accepted screenshot and its notes together for the final inline report.
  13. If the user explicitly requested Figma, add each accepted screenshot and its notes to the board immediately.

Default inline report:

  • Render accepted screenshots in flow order.
  • Keep the report pithy: overall verdict, numbered steps, highest-impact changes, and evidence limits.
  • Tie every finding to the screenshot or step that supports it.

If the user explicitly requested Figma:

  • Place screenshots in order, left to right on the same row, with 200px between each one. Go to a new row every 15 screenshots, and separate those rows by 600px.
  • Underneath the screenshot, add text with the Step number and its name, and notes.
  • Keep a local folder copy even when Figma succeeds.
  • When you are done, wrap all of the assets you added in a Section and title the section.

Acceptance checks:

  • Every important step in the requested flow has a valid screenshot or a named blocker.
  • Screenshots are saved in order.
  • Screenshots are rendered inline in the final report.
  • When Figma was explicitly requested, screenshots and notes are placed in the board as they are captured.
  • Every note points to the screenshot or step it describes.
  • Notes explain strengths, UX issues, accessibility risks, and evidence limits when those apply.
  • Accessibility risks say what can be seen from screenshots and what still needs testing.
  • The final screenshot set and notes are enough to support the requested audit.

Blockers:

  • The flow cannot be completed.
  • A required step cannot be screenshotted.
  • The source changes in a way that makes the flow unclear.
  • Screenshots cannot be saved or rendered inline.
  • Notes cannot be written.
  • The requested claim would require evidence that screenshots cannot provide.
  • Do not claim an audit if the actual flow could not be accessed and captured. Help Center pages, web searches, and other indirect evidence are research, not an audit.

Final Response

After the flow is captured and notes are written, list every step in the final response.

The final step list MUST include:

  • step number
  • short description of the step
  • general health of that step

Also include where the full output was saved or placed.

Keep the language direct. Do not use broad design jargon when a plain phrase works.

FAQ

What does the audit skill do?

Audit or critique a product flow, journey, workflow, funnel, onboarding path, checkout path, settings path, screen, or multi-step product experience by capturing screenshots first, then reporting UX, design, and accessibility findings inline from that evidence. Use Figma only when the user explicitly asks for a board. Use when the user asks to audit, review, critique, inspect, assess, analyze, evaluate, or give feedback on a product experience.

How do I install audit?

Run npx skills add https://github.com/openai/role-specific-plugins --skill audit in your project. The skills CLI detects the agents you use and copies the skill into the right folder. For Claude Code you can also place the skill folder at ~/.claude/skills/audit/ (personal) or .claude/skills/audit/ (project).

Which AI agents can use audit?

Any agent that supports the open Agent Skills format (a folder with a SKILL.md file), including Claude Code, Codex, Cursor, GitHub Copilot, Gemini CLI, Windsurf, Cline, OpenCode and more.

Is audit safe to install?

No partner security audit is available yet. Skills can run commands and scripts, so read the SKILL.md and any bundled files before installing.

Who maintains audit?

It is published by openai in openai/role-specific-plugins. It has 65 recorded installs.

More from openai/role-specific-plugins

View all →

image-to-code

openai/role-specific-plugins

Implement a selected image, screenshot, mockup, or Image Gen reference as a faithful, responsive frontend.

Media & Creative184 installs

analyze-data-quality

openai/role-specific-plugins

Open the skill to read its SKILL.md instructions.

AI & Agents106 installs

visualize-data

openai/role-specific-plugins

Design, build, revise, or QA quantitative charts and figures. Use when an analytical answer needs visual judgment, whether for an inline answer, report, dashboard, notebook, or artifact.

Data & Databases100 installs

validate-data

openai/role-specific-plugins

Validate whether an analysis is accurate, well-supported, and ready to share or use for a decision. Use when reviewing methodology, calculations, comparisons, visuals, caveats, or conclusions.

AI & Agents98 installs

build-dashboard

openai/role-specific-plugins

Open the skill to read its SKILL.md instructions.

Data & Databases91 installs

product-business-analysis

openai/role-specific-plugins

Open the skill to read its SKILL.md instructions.

Popular security skills

View category →

azure-compliance

microsoft/azure-skills

Run Azure compliance and security audits with azqr plus Key Vault expiration checks. Covers best-practice assessment, resource review, policy/compliance validation, and security posture checks. WHEN: compliance scan, security audit, BEFORE running azqr (compliance cli tool), Azure best practices, Key Vault expiration check, expired certificates, expiring secrets, orphaned resources, compliance assessment.

OfficialSecurity567K installs

minimal-run-and-audit

lllllllama/rigorpilot-skills

Rigor Run skill for README-first deep learning repo reproduction. Use when the task is specifically to capture or normalize evidence from the selected smoke test or documented inference or evaluation command and write standardized reprooutputs/ files, including patch notes when repository files changed. Do not use for training execution, initial repo intake, generic environment setup, paper lookup, target selection, hidden scientific-meaning changes, or end-to-end orchestration by itself.

Security477.4K installs

seo-audit

coreyhaines31/marketingskills

When the user wants to audit, review, or diagnose SEO issues on their site. Also use when the user mentions "SEO audit," "technical SEO," "why am I not ranking," "SEO issues," "on-page SEO," "meta tags review," "SEO health check," "my traffic dropped," "lost rankings," "not showing up in Google," "site isn't ranking," "Google update hit me," "page speed," "core web vitals," "crawl errors," "indexing issues," "stuck on page 2," "striking distance keywords," "title tag rewrite," "low CTR," "local SEO," "Google Business Profile," or "map pack." Use this even if the user just says something vague like "my SEO is bad" or "help with SEO" — start with an audit. For building pages at scale to target keywords, see programmatic-seo. For adding structured data, see schema. For AI search optimization, see ai-seo.

Security238.7K installs

firebase-security-rules-auditor

firebase/agent-skills

Audits Firebase (Firestore, Cloud Storage) security rules for vulnerabilities, privilege escalation, role bypasses, create vs update inconsistencies, resource exhaustion, type safety, size limits, and hasOnly ownership checks. Use when auditing/reviewing rules, running red-team rule assessments, or scoring against auditor checklists. Don't use for Firebase CLI (login, deploy), Auth, Crashlytics, Remote Config, or database queries.

OfficialSecurity139.1K installs

audit

pbakaus/impeccable

Run technical quality checks across accessibility, performance, theming, responsive design, and anti-patterns. Generates a scored report with P0-P3 severity ratings and actionable plan. Use when the user wants an accessibility check, performance audit, or technical quality review.

Security81.9K installs

competitors

coreyhaines31/marketingskills

When the user wants to create competitor comparison or alternative pages for SEO and buyer-facing use. Also use when the user mentions 'alternative page,' 'vs page,' 'competitor comparison,' 'comparison page,' '[Product] vs [Product],' '[Product] alternative,' 'competitive landing pages,' 'how do we compare to X,' 'competitor teardown,' 'audit our competitor pages,' 'are our comparison pages out of date,' or 'competitive asset audit.' Use this for any content that positions your product against competitors. Covers four formats: singular alternative, plural alternatives, you vs competitor, and competitor vs competitor. For auditing existing claims (not researching competitors from scratch, which is competitor-profiling; not technical SEO on these pages, which is seo-audit), use the asset audit here. For internal battle cards and sales-specific competitor docs, see sales-enablement.

Security79.3K installs