audit-logging

Automate append-only audit logging for compliance and security events.

Updated Jan 30, 2026

Search Tags:#security #compliance #observability #cloudwatch #immutable #audit-logging #append-only

Ready to run

npx skills add https://github.com/jrmatherly/metorial-workspace --skill audit-logging-jrmatherly

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: audit-logging
Source: https://github.com/jrmatherly/metorial-workspace/tree/main/.github/skills/audit-logging
Command: npx skills add https://github.com/jrmatherly/metorial-workspace --skill audit-logging-jrmatherly

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires uuid, @aws-sdk/client-cloudwatch-logs.

What problem does it solve?

This Skill provides a structured, tamper-evident audit log to meet compliance and security requirements by recording user actions, data changes, and system events across applications.

Core Features & Use Cases

Append-only audit log with structured events
Context enrichment (requestId, IP, userAgent)
Multi-language implementations (TypeScript/JavaScript, Python)
Optional export to cloud services (CloudWatch)
Compliance support (SOC 2, HIPAA, GDPR)
Real-world usage: security incident investigations and regulatory audits

Quick Start

Install or enable the audit-logging modules in your app (TypeScript/JS or Python). Instrument application code with auditLogService calls and middleware to capture request context. Configure log destinations (append-only store, CloudWatch) and run a sample event.

Frequently Asked Questions about audit-logging

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I create a tamper-proof audit trail for SOC 2 or HIPAA compliance?▼

A tamper-proof audit trail records user actions and data changes in an append-only store with structured events. This Skill automates that process, adding request context and supporting compliance programs like SOC 2, HIPAA, and GDPR.

Does audit logging work with both TypeScript and Python applications?▼

Audit logging supports both TypeScript/JavaScript and Python implementations. You can instrument application code with auditLogService calls and middleware to capture request context across different language environments.

Can I export audit logs to CloudWatch for security incident investigations?▼

You can export audit logs to CloudWatch for security incident investigations. The Skill configures log destinations to include both an append-only store and optional external cloud services for centralized observability.

What is an append-only audit store and when do I need it?▼

An append-only audit store is a log where events can be added but never modified or deleted. You need it when regulatory frameworks require immutable, tamper-evident records of user actions, data changes, and system events.

How do I add request context like IP and userAgent to compliance audit logs?▼

To add request context to compliance audit logs, use middleware to capture requestId, IP, and userAgent automatically. The Skill enriches structured audit events with this context during the logging process.

Do I need AWS credentials to use the audit-logging Skill?▼

AWS credentials are only required if you configure optional export to CloudWatch. The core append-only audit store and structured event logging function without any AWS dependencies.