# Agentwhy Session Audit (agent skill)

> Agentwhy Session Audit is an agent skill (a SKILL.md file) from davepoon/buildwithclaude. Checks which private files (.env, keys, secrets) Claude Code and its subagents reached in this project, whether a value came into an agent's context, and which key to change… It works with Claude Code and has 3,679 GitHub stars across a repository of 3 listed skills.

Checks which private files (.env, keys, secrets) Claude Code and its subagents reached in this project, whether a value came into an agent's context, and which key to change, by running the open source agentwhy CLI over the session records Claude Code already keeps on disk. Use when the user asks whether the agent or a subagent read their .env or other secrets, which private files a session touched, whether a key leaked into the conversation, or which key to rotate.

## Key facts

| Fact | Value |
|---|---|
| Repository | https://github.com/davepoon/buildwithclaude |
| Skill path | plugins/all-skills/skills/agentwhy-session-audit/SKILL.md |
| Skill name | agentwhy-session-audit |
| GitHub stars | 3,679 |
| Installs on skills.sh | not listed |
| License | MIT |
| Skills in repo | 3 |
| Plugin marketplace | buildwithclaude |
| Official | no |
| Works with | Claude Code |
| Category | Security |
| Last commit | Oct 26, 2026 |

## When it triggers

- Use when the user asks whether the agent or a subagent read their .

## Add this skill

### Claude Code

```sh
/plugin marketplace add davepoon/buildwithclaude
/plugin install all-skills@buildwithclaude
```

In the Claude apps, zip the skill folder and upload it under Customize > Skills > + > Upload a skill (code execution must be on).

### ChatGPT / Codex

```sh
git clone --depth 1 https://github.com/davepoon/buildwithclaude.git
cp -r buildwithclaude/plugins/all-skills/skills/agentwhy-session-audit .agents/skills/agentwhy-session-audit   # repo; ~/.agents/skills for all projects
```

### Cursor

```sh
git clone --depth 1 https://github.com/davepoon/buildwithclaude.git
cp -r buildwithclaude/plugins/all-skills/skills/agentwhy-session-audit .cursor/skills/agentwhy-session-audit   # project; ~/.cursor/skills for all projects
```

Sources (checked 2026-10-07): https://code.claude.com/docs/en/skills, https://support.claude.com/en/articles/12512180-using-skills-in-claude, https://learn.chatgpt.com/docs/build-skills, https://cursor.com/docs/context/skills

---

Canonical page: https://appsgit.com/skills/davepoon-agentwhy-session-audit
Source: appsgit (https://appsgit.com), the app store for github. Data from the GitHub API, refreshed daily.
Machine access: JSON API https://appsgit.com/api/v1/apps (OpenAPI: https://appsgit.com/openapi.json), MCP server https://mcp.appsgit.com/mcp, full index https://appsgit.com/llms-full.txt.