skills.rest
emiljuchnikowski
emiljuchnikowskiCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

audit-log

Parse Claude Code audit logs and aggregate events by type.

1|Updated Sep 15, 2023
Search Tags:#debugging#logs#audit#compliance#claude-code#tool-use#audit-trail
One-click install
npx skills add https://github.com/emiljuchnikowski/smartsoft001 --skill audit-log-emiljuchnikowski
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: audit-log
Source: https://github.com/emiljuchnikowski/smartsoft001/tree/main/packages/shared/claude-plugins/src/plugins/smart/skills/audit-log
Command: npx skills add https://github.com/emiljuchnikowski/smartsoft001 --skill audit-log-emiljuchnikowski

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Claude Code audit trails can be complex to review; this skill enables quick querying and analysis of the audit logs stored under .claude/audit_logs to surface actionable insights for debugging and compliance.

Core Features & Use Cases

  • Review the Claude Code audit trail to understand tool usage and session activity.
  • Summarize events by type and identify blocked actions or anomalies.
  • Support debugging, auditing, and compliance reviews by highlighting key events with timestamps.

Quick Start

Use the /smart:audit-log command with today, yesterday, or a specific date (YYYYMMDD) to fetch and review the corresponding audit logs from .claude/audit_logs/.

Frequently Asked Questions about audit-log

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I review Claude Code audit logs for debugging?▼

Review Claude Code audit logs by parsing the .claude/audit_logs/YYYYMMDD_audit.jsonl files to aggregate tool actions and session activity. This surfaces actionable insights for debugging by highlighting blocked actions and anomalies with timestamps.

What is the best way to check Claude Code compliance and session activity?▼

Checking Claude Code compliance involves summarizing audit trail events by type to identify blocked actions. The audit logs aggregate session activity and tool usage, providing a clear record for compliance reviews and activity audits.

How do I query a specific date in the Claude Code audit trail?▼

Query a specific date in the Claude Code audit trail by invoking the /smart:audit-log command with a date argument like today, yesterday, or a specific YYYYMMDD format. This fetches and reviews the corresponding JSONL log file.

Can I identify blocked actions and anomalies in Claude Code tool usage?▼

Identify blocked actions and anomalies in Claude Code tool usage by parsing the JSONL audit trail files. The logs highlight key events with timestamps, allowing you to quickly surface and investigate any blocked actions or irregular session activity.

Do I need any dependencies to parse JSONL audit trail files?▼

No dependencies are required to parse JSONL audit trail files. The skill directly reads the .claude/audit_logs/YYYYMMDD_audit.jsonl files generated by Claude Code to aggregate events and analyze tool actions without external components.

Related Skills

Explore More Software Engineering Skills→
InnerScopeHearingInnerScopeHearing

fleet-telemetry

Capture Claude Code session metrics and forward them to PostHog.

Official
Advanced
skwuwuskwuwu

gvm_audit

Verify GVM audit log integrity and export compliance reports.

Community
Intermediate
KYRIE66nbKYRIE66nb

trace

Present chronological traces of hooks, keywords, skills, agents, and tools via MCP tools.

Community
Intermediate
vankichivankichi

claude-session-jsonl

Parse Claude Code session logs to compute token usage, cost, and tool activity.

Community
Advanced