Agent skill · security · aj-geddes
security-audit-logging
Implement comprehensive security audit logging for compliance, forensics, and SIEM integration. Use when building audit trails, compliance logging, or security monitoring systems.
Why this skill is useful
Provides specific implementation examples and best practices for security audit logging that the AI wouldn't reliably generate on its own.
What it needs
Requires winston, winston-elasticsearch installed locally. About 1k tokens when loaded. Last updated 2026-03-04. 307 stars on the source repository.
What this skill does
Security Audit Logging Table of Contents Overview When to Use Quick Start Reference Guides Best Practices Overview Implement comprehensive audit logging for security events, user actions, and system changes with structured logging, retention policies, and SIEM integration. When to Use Compliance requirements (SOC 2, HIPAA, PCI-DSS) Security monitoring Forensic investigations User activity tracking System change auditing Breach detection Quick Start Minimal working example: Reference Guides Detailed implementations in the references/ directory: Guide Contents --- --- Node.js Audit Logger Node.js Audit Logger Python Audit Logging System Python Audit Logging System Java Audit Logging Java Audit Logging Best Practices ✅ DO Log all security events Use structured logging Include timestamps (UTC) Log user context Implement log retention Encrypt sensitive logs Monitor log integrity Send to SIEM Include request IDs ❌ DON'T Log passwords/secrets Log sensitive PII unnecessarily Skip failed attempts Allow log tampering Store logs insecurely Ignore log analysis
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills aj-geddes/security-audit-logging