audit-trail

Record agent actions in an immutable, append-only JSON Lines log with hash chaining.

1|Updated Mar 7, 2026
One-click install
npx skills add https://github.com/jimmymalhan/codereview-pilot --skill audit-trail-jimmymalhan
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: audit-trail
Source: https://github.com/jimmymalhan/codereview-pilot/tree/main/.claude/skills/audit-trail
Command: npx skills add https://github.com/jimmymalhan/codereview-pilot --skill audit-trail-jimmymalhan

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill provides a tamper-evident, append-only log of all agent actions, ensuring accountability and compliance.

Core Features & Use Cases

  • Comprehensive Logging: Records significant agent actions like phase starts/ends, commits, pushes, PR creations/merges, and deployments.
  • Tamper Detection: Utilizes a hash chain mechanism to verify the integrity of the log.
  • Use Case: For regulatory compliance, an audit trail can prove that specific actions were taken by the system within defined timeframes, meeting audit requirements.

Quick Start

Append a new log entry for a completed agent phase with trace ID 'abc-123' and outcome 'success'.

Frequently Asked Questions about audit-trail

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I create an immutable audit trail for agent actions?

An immutable audit trail for agent actions is created using an append-only log with daily rotating JSON Lines format. This records events like phase transitions, commits, and deployments to ensure accountability and compliance.

How does hash chaining work for tamper detection in compliance logging?

Hash chaining for tamper detection works by linking each new log entry to the previous one using a cryptographic hash. This mechanism verifies the integrity of the compliance log and immediately exposes unauthorized modifications.

What agent actions can be recorded in an append-only log?

Agent actions that can be recorded in an append-only log include phase transitions, code commits, pushes, pull request operations, and deployments, providing a comprehensive record for regulatory compliance verification.

Can I use JSON Lines format for daily rotating compliance logs?

Yes, JSON Lines format supports daily rotating compliance logs by appending each agent action as a discrete JSON object. This ensures the audit trail remains structured, machine-readable, and organized by date.

When do I need an immutable log for regulatory compliance?

An immutable log for regulatory compliance is needed when you must prove that specific system actions were executed within defined timeframes. It provides tamper-evident accountability required to meet formal audit requirements.