audit-log-checker

What problem does it solve?

Incomplete, tamperable, or non-compliant audit logs create critical security blind spots, trigger failed regulatory audits, and lead to costly compliance fines for organizations. This Skill eliminates these risks by systematically validating every aspect of your audit logging implementation against 2026 global best practices and mandatory regulatory requirements.

Core Features & Use Cases

• 10-Point Compliance Validation: Scans for critical gaps including missing append-only enforcement, absent cryptographic hash chains for tamper evidence, un-scoped tenant access, PII in log payloads, and missing mandatory authentication/authorization event coverage.
• Regulatory Alignment Checks: Verifies adherence to retention and logging requirements for PCI-DSS, HIPAA, SOC 2, SOX, and GDPR, with clear severity tiers for each finding to prioritize remediation.
• Use Case: A healthcare SaaS engineering team preparing for a HIPAA audit can use this Skill to scan their audit log schema and emission code to catch gaps like missing patient data redaction or insufficient retention policies weeks before the auditor arrives.

Quick Start

Use the audit-log-checker skill to review your project's audit log implementation and flag compliance, security, and operational visibility gaps before your next regulatory audit.