Skip to content
Agentmart
Submit a tool

iat

Audit Python scripts for compliance with the Inline Audit Trail (IAT) convention — INTENT, REASONING, ASSUMES, SOURCE comments and validation guards — AND…

Skill by hsigstad

IndexedMIT
Write a review

Install

Works with Claude Code, Claude apps, Codex, Cursor, Gemini CLI, GitHub Copilot, VS Code, OpenCode, Goose, Windsurf. Read the repository before you give any tool access to your data.

npx agentmarket install skill/hsigstad-iat

Asks which of your tools to add it to (Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI, Claude Desktop) and shows the change first. See https://agentmart.dev/cli.

Get the weekly diff

The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.

We use your email only for this newsletter. Privacy

About

Audit Python scripts for compliance with the Inline Audit Trail (IAT) convention — INTENT, REASONING, ASSUMES, SOURCE comments and validation guards — AND propose the comment text to add. LLM-driven, judgment-heavy, slower than /check. Use when the user invokes /iat, /iat <script>, /iat <slug>, or asks to 'check IAT compliance', 'audit comments in source/', 'add missing IAT comments'.

Use cases: ml, security

No reviews yet. Installed it? Reviews come from verified installers only. How reviews work

Permissions

What this skill can do and what it asks for, from its SKILL.md. Checked Oct 25, 2026.

Tools
No tools found
Secrets
None asked for
Install scripts
None found

Network hosts it talks to 1

  • codeload.github.com · found in install command

Files it touches

  • ~/.claude/skills/iat

What's inside

Skill name
iat
Description
Audit Python scripts for compliance with the Inline Audit Trail (IAT) convention — INTENT, REASONING, ASSUMES, SOURCE comments and validation guards — AND propose the comment text to add. LLM-driven, judgment-heavy, slower than /check. Use when the user invokes /iat, /iat <script>, /iat <slug>, or asks to 'check IAT compliance', 'audit comments in source/', 'add missing IAT comments'.
License
MIT
Instructions
154 lines in SKILL.md · view on GitHub

Files (1)

  • SKILL.md

SKILL.md (first lines)

# /iat — Inline Audit Trail compliance check (with proposed comments)

Audits data-transformation scripts against the Inline Audit Trail
convention defined in `research-kit/rules/inline_audit_trail.md`, and
proposes the exact comment text to add for every weak spot. Judgment-heavy
and slower than `/check` — that's why it lives as its own skill.

The default behavior is *propose, don't edit*. The skill emits the
suggested comment text with the line number; the researcher pastes it in.
IAT comments are subtle and benefit from a human read before they land.

## How to invoke

| Form | What it does |
|------|--------------|
| `/iat` | Audit all `source/**.py` in the current project |
| `/iat <script>` | Audit one script |
| `/iat <slug>` | Audit a specific project by slug |
| `/iat --no-suggestions` | Report only — no proposed comment text |

## Scope

By default, audit all `.py` files in `source/`. IAT applies to **data
transformation scripts** only. Skip:

- `diarios/` module code (shared library, separate convention).
- Configuration files, SCons build files.
- LaTeX sources.
- Notebook cells unless they contain substantial pipeline code.
- Pure utility/helper modules that don't do data work.
- Underscore-prefixed scripts (`_foo_check.py`) — exploratory; opted out.

## What to check

For each script, evaluate these six categories. Be **conservative**: only
flag what would genuinely surprise a careful reader who didn't write the
code. Over-commenting is also a problem.

### 1. Stage documentation

- **Function pipelines (preferred style):** functions have docstrings when
  the name alone doesn't convey analytical rationale.
- **Script-style code:** `# ---` section headers with preamble comments
  delimit logical stages.
- A clean `.pipe()` chain of well-named functions may need very few
  comments — that's fine. Don't penalize self-documenting code.

### 2. INTENT comments

Analytically meaningful steps should be documented:

- Sample construction / inclusion-exclusion rules.
- Classification logic.
- Non-obvious filters.

Don't flag obvious operations. If `keep_elected_candidates()` already
conveys intent, no INTENT comment is needed.

### 3. REASONING / WHY comments

Design choices with plausible alternatives should be documented:

- Join type choices (why left vs inner?).
- Ordering of regex patterns.
- Thresholds and parameter choices.
- Institutional context that explains the choice.

### 4. ASSUMES comments

Hidden data properties should be documented:

- Merge operations — expected cardinality?
- Uniqueness assumptions on keys.
- Identifier normalization assumptions.
- Interpretation of missing values or failed matches.

### 5. SOURCE comments

Scripts reading raw data from external locations should have a SOURCE
comment with URL, format, encoding, delimiter. NOT needed for `build/`
artifacts produced upstream by other pipeline code.

### 6. Validation guards

- After joins: row-count preservation assertions?
- Before merges: key uniqueness assertions?
- After recodes/classification: value domain checks?
- End of pipeline: final dataset contract validation?

## Propose comments

For each finding, emit the suggested comment text with the line number.
Format:

```
## <filename>

**Overall:** [Good / Needs attention / Significant gaps]

### Missing or weak documentation

- Line 47 (merge without ASSUMES):
  Add above the merge:
  # ASSUMES: each `cnpj_raiz` appears once in `firms` (one_to_one), zero or more in `establishments` (one_to_many).

- Line 113 (non-obvious filter without REASONING):
  Add above the filter:
  # REASONING: dropping inscrições filed before 2010 — the parser misclassifies
  # older format identifiers as nulls (see decisions.md 2024-08-12).

### Good practices found

- <one line on what's well-documented, when worth surfacing>
```

After all files, a one-line summary count.

## Output

From hsigstad/research-kit, MIT.

More from hsigstad/research-kit

Signals

Stars
0
Forks
1
Open issues
1
Last commit (this folder)
Jul 5, 2026 (3 months ago)

From GitHub (fetched Oct 24, 2026).

Details

License
MIT
First seen
Oct 24, 2026
Last checked
Oct 24, 2026

More from hsigstad

Cite this page

iat skill. Agent Mart. https://agentmart.dev/skills/hsigstad-iat (last updated 2026-10-24)