federation-audit

Query federation audit logs with compliance and severity filtering.

70.1k|8.4k|Updated Jun 2, 2025
One-click install
npx skills add https://github.com/ruvnet/claude-flow --skill federation-audit
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: federation-audit
Source: https://github.com/ruvnet/claude-flow/tree/main/plugins/ruflo-federation/skills/federation-audit
Command: npx skills add https://github.com/ruvnet/claude-flow --skill federation-audit

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires @claude-flow/plugin-agent-federation.

What problem does it solve?

Reviewing distributed federation audit logs manually is slow and error-prone, especially when you must prove compliance with HIPAA, SOC2, or GDPR requirements. This Skill queries structured federation audit logs and filters them by compliance mode, date range, and severity so you can surface the events that matter.

Core Features & Use Cases

  • Compliance Mode Filtering: Query logs under HIPAA, SOC2, or GDPR modes, each with its own logging scope such as PHI detection, access control events, or consent tracking.
  • Severity and Date Filtering: Narrow results by severity level (critical, error, warn, info) and a --since date to focus on a specific incident window.
  • Summarized Findings: Get totals for events, PII detections, threat blocks, and trust changes, with critical and error events highlighted.
  • Use Case: During a SOC2 audit, run the skill with --compliance soc2 --since 2024-01-01 to pull all access control and change management events for the audit period and summarize them for the auditor.

Quick Start

Ask the assistant to query federation audit logs for GDPR compliance events since last month and highlight any critical severity findings.

Frequently Asked Questions about federation-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I query federation audit logs by compliance mode?

Pass the --compliance flag with hipaa, soc2, or gdpr to the audit command. The skill runs ruflo-federation audit with your chosen mode and returns filtered log entries matching that framework's logging scope.

How to filter audit logs by severity and date range?

Use the --severity flag with critical, error, warn, or info, and the --since flag with a date. Both filters combine with the compliance mode so you can isolate, for example, critical GDPR events since a specific date.

What is logged in HIPAA vs SOC2 vs GDPR compliance modes?

HIPAA logs a full audit trail with PHI detection and no PII in logs, with 6-year retention. SOC2 covers access control, change management, and availability monitoring. GDPR records data processing, consent tracking, right to erasure, and data residency.

What does the audit summary include?

The summary reports total events, PII detections, threat blocks, and trust changes found in the queried logs. Any critical or error severity events are highlighted separately so they can be addressed first.

Does the federation audit tool require local installation?

No local installation is required. The skill invokes the tool through npx with the @claude-flow/plugin-agent-federation package, which fetches and runs the latest version on demand.