[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M6GCPP6ENCT874EPVBVP0DB1":3,"skill-same:01M6GCPP6ENCT874EPVBVP0DB1":84},{"skillNo":4,"name":5,"nameZh":6,"description":7,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":16,"categories":17,"keywords":31,"publishedAt":52,"linkOnly":53,"markdownContent":54,"markdownBody":55,"frontMatter":56,"refName":62,"commitSha":63,"skillDirectory":64,"forksCount":65,"repositoryHtmlUrl":66,"repositoryHomepageUrl":6,"ownerHtmlUrl":67,"ownerBlogUrl":6,"ownerDescription":68,"updatedAt":69,"install":70,"resources":83},"01M6GCPP6ENCT874EPVBVP0DB1","audit-report",null,"Generate audit reports and compliance trails using Harness audit trail data via MCP v2 tools. Track user actions, resource changes, authentication events, and access patterns across accounts, organizations, and projects. Use when asked to audit activity, generate compliance reports, investigate security incidents, review user actions, check change logs, or produce SOC2\u002FGDPR\u002FHIPAA audit evidence. Trigger phrases: audit report, audit trail, compliance audit, user activity log, change log, access audit, security investigation, who changed what, audit events.","zapabob\u002FSkills","zapabob","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F130830376?v=4","01M6DBMYZAGRTFQDSQYW3W764P","峯岸 亮","01M6DBMZ3GKDSJ01NZ9XTZD7JD",2,"Apache-2.0","https:\u002F\u002Fgithub.com\u002Fzapabob\u002FSkills\u002Fblob\u002Fmain\u002Farchive\u002Fskill-md-reviewed\u002Fsha256\u002Fad\u002Fad0a843a769e844818b6f6c109a49152136165761aa31b1d703df12410305098\u002FSKILL.md",[18,23,28],{"categoryNo":19,"categoryName":20,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000023","Skill与智能体开发","SCENARIO","使用场景",{"categoryNo":24,"categoryName":25,"taxonomyType":26,"taxonomyTypeDesc":27},"01JBSEEDCAT000000000000034","行政与办公人员","PROFESSION","适用职业",{"categoryNo":29,"categoryName":30,"taxonomyType":26,"taxonomyTypeDesc":27},"01JBSEEDCAT000000000000037","律师与法务",[32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51],"report","audit","audit report","server","activity","across","reports","log","projects","access","soc2","data","actions","MCP","logs","authentication","generate","change","security","review","2026-11-10 10:12:30",false,"---\r\nname: audit-report\r\ndescription: >-\r\n  Generate audit reports and compliance trails using Harness audit trail data via MCP v2 tools.\r\n  Track user actions, resource changes, authentication events, and access patterns across accounts,\r\n  organizations, and projects. Use when asked to audit activity, generate compliance reports,\r\n  investigate security incidents, review user actions, check change logs, or produce SOC2\u002FGDPR\u002FHIPAA\r\n  audit evidence. Trigger phrases: audit report, audit trail, compliance audit, user activity log,\r\n  change log, access audit, security investigation, who changed what, audit events.\r\nmetadata:\r\n  author: Harness\r\n  version: 1.0.0\r\n  mcp-server: harness-mcp-v2\r\nlicense: Apache-2.0\r\ncompatibility: Requires Harness MCP v2 server (harness-mcp-v2)\r\n---\r\n\r\n# Audit Report Skill\r\n\r\nGenerate audit reports and compliance trails using Harness MCP v2 tools.\r\n\r\n## MCP v2 Tools Used\r\n\r\n- `harness_list` with `resource_type: \"audit_event\"` -- list audit events with filters\r\n- `harness_describe` with `resource_type: \"audit_event\"` -- discover available filters and fields\r\n\r\nAudit events are **read-only**. You can list and filter them but cannot create, update, or delete them.\r\n\r\n## Instructions\r\n\r\n### Step 1: Discover Available Filters\r\n\r\n```\r\nharness_describe(resource_type=\"audit_event\")\r\n```\r\n\r\nUnderstand the available filter parameters before querying.\r\n\r\n### Step 2: List Audit Events\r\n\r\n```\r\nharness_list(\r\n  resource_type=\"audit_event\",\r\n  org_id=\"\u003Corg>\",           # optional - scope to organization\r\n  project_id=\"\u003Cproject>\",   # optional - scope to project\r\n  search_term=\"\u003Cuser or resource>\",  # optional\r\n  page=0,\r\n  size=100\r\n)\r\n```\r\n\r\n### Step 3: Filter by Action Type\r\n\r\nFilter results by these standard action types:\r\n\r\n| Action | Description |\r\n|--------|-------------|\r\n| `CREATE` | Resource creation |\r\n| `UPDATE` | Resource modification |\r\n| `DELETE` | Resource deletion |\r\n| `LOGIN` | User authentication |\r\n| `LOGOUT` | Session termination |\r\n| `ACCESS` | Resource access |\r\n| `EXECUTE` | Pipeline execution |\r\n\r\n### Step 4: Filter by Resource Type\r\n\r\nCommon resource types in audit events:\r\n\r\n| Resource Type | Examples |\r\n|---------------|----------|\r\n| `PIPELINE` | Pipeline create, update, delete |\r\n| `SECRET` | Secret access, rotation, deletion |\r\n| `CONNECTOR` | Connector modifications |\r\n| `SERVICE` | Service definition changes |\r\n| `ENVIRONMENT` | Environment configuration changes |\r\n| `USER` | User management actions |\r\n| `ROLE` | Role assignment changes |\r\n| `USER_GROUP` | Group membership changes |\r\n\r\n### Step 5: Analyze and Correlate\r\n\r\n- Group events by user to identify activity patterns\r\n- Group events by resource to track change history\r\n- Correlate timestamps to reconstruct incident timelines\r\n- Flag anomalies (off-hours activity, unusual access patterns, privilege escalation)\r\n\r\n### Step 6: Generate Report\r\n\r\nFormat findings using the templates in references\u002Freport-templates.md.\r\n\r\nFor report templates (General, User Activity, Security) and compliance framework mappings (SOC 2, GDPR, HIPAA), consult references\u002Freport-templates.md.\r\n\r\n## Examples\r\n\r\n### Generate a 30-day audit report\r\n\r\n```\r\n\u002Faudit-report\r\nGenerate an audit report for the last 30 days\r\n```\r\n\r\n### Investigate a specific user\r\n\r\n```\r\n\u002Faudit-report\r\nWhat has [REDACTED_EMAIL] been doing in the last 7 days?\r\n```\r\n\r\n### Track production changes\r\n\r\n```\r\n\u002Faudit-report\r\nShow all pipeline and environment changes in the production project this month\r\n```\r\n\r\n### Security investigation\r\n\r\n```\r\n\u002Faudit-report\r\nShow all secret access events and privilege changes from last week\r\n```\r\n\r\n### Compliance evidence\r\n\r\n```\r\n\u002Faudit-report\r\nGenerate SOC2 audit evidence for Q4 covering access control and change management\r\n```\r\n\r\n## Error Handling\r\n\r\n| Error | Cause | Solution |\r\n|-------|-------|----------|\r\n| No audit events returned | Time range too narrow or wrong scope | Broaden time range; verify org_id\u002Fproject_id |\r\n| Access denied | User lacks audit view permissions | Request `core_audit_view` permission |\r\n| Pagination incomplete | More events than page size | Increment `page` parameter until all pages fetched |\r\n| Search term returns nothing | User ID format mismatch | Try email, username, and display name variants |\r\n\r\n## Performance Notes\r\n\r\n- Paginate through all results before generating the report. Incomplete data leads to inaccurate audit trails.\r\n- Cross-reference events across scopes (account, org, project) for a complete picture. Do not skip scope levels.\r\n- For compliance reports, verify every claim against actual audit data. Do not infer or assume activity that is not in the logs.\r\n\r\n## Troubleshooting\r\n\r\n### No Events Found\r\n\r\n1. Start with a broader time range and no filters\r\n2. Verify the org_id and project_id scope -- account-level events require no org\u002Fproject filter\r\n3. Remove search_term to confirm events exist, then re-add filters\r\n\r\n### Missing User Activity\r\n\r\n1. Check both email and username formats for the user\r\n2. Service account activity may appear under a different principal name\r\n3. API key usage may not show as the human user\r\n\r\n### Incomplete Audit Trail\r\n\r\n1. Paginate through all results -- check if `size` returned equals the `size` requested (more pages likely)\r\n2. Account-level events are separate from org\u002Fproject events -- query at the right scope\r\n3. Some event types may require specific permissions to view\r\n","# Audit Report Skill\r\n\r\nGenerate audit reports and compliance trails using Harness MCP v2 tools.\r\n\r\n## MCP v2 Tools Used\r\n\r\n- `harness_list` with `resource_type: \"audit_event\"` -- list audit events with filters\r\n- `harness_describe` with `resource_type: \"audit_event\"` -- discover available filters and fields\r\n\r\nAudit events are **read-only**. You can list and filter them but cannot create, update, or delete them.\r\n\r\n## Instructions\r\n\r\n### Step 1: Discover Available Filters\r\n\r\n```\r\nharness_describe(resource_type=\"audit_event\")\r\n```\r\n\r\nUnderstand the available filter parameters before querying.\r\n\r\n### Step 2: List Audit Events\r\n\r\n```\r\nharness_list(\r\n  resource_type=\"audit_event\",\r\n  org_id=\"\u003Corg>\",           # optional - scope to organization\r\n  project_id=\"\u003Cproject>\",   # optional - scope to project\r\n  search_term=\"\u003Cuser or resource>\",  # optional\r\n  page=0,\r\n  size=100\r\n)\r\n```\r\n\r\n### Step 3: Filter by Action Type\r\n\r\nFilter results by these standard action types:\r\n\r\n| Action | Description |\r\n|--------|-------------|\r\n| `CREATE` | Resource creation |\r\n| `UPDATE` | Resource modification |\r\n| `DELETE` | Resource deletion |\r\n| `LOGIN` | User authentication |\r\n| `LOGOUT` | Session termination |\r\n| `ACCESS` | Resource access |\r\n| `EXECUTE` | Pipeline execution |\r\n\r\n### Step 4: Filter by Resource Type\r\n\r\nCommon resource types in audit events:\r\n\r\n| Resource Type | Examples |\r\n|---------------|----------|\r\n| `PIPELINE` | Pipeline create, update, delete |\r\n| `SECRET` | Secret access, rotation, deletion |\r\n| `CONNECTOR` | Connector modifications |\r\n| `SERVICE` | Service definition changes |\r\n| `ENVIRONMENT` | Environment configuration changes |\r\n| `USER` | User management actions |\r\n| `ROLE` | Role assignment changes |\r\n| `USER_GROUP` | Group membership changes |\r\n\r\n### Step 5: Analyze and Correlate\r\n\r\n- Group events by user to identify activity patterns\r\n- Group events by resource to track change history\r\n- Correlate timestamps to reconstruct incident timelines\r\n- Flag anomalies (off-hours activity, unusual access patterns, privilege escalation)\r\n\r\n### Step 6: Generate Report\r\n\r\nFormat findings using the templates in references\u002Freport-templates.md.\r\n\r\nFor report templates (General, User Activity, Security) and compliance framework mappings (SOC 2, GDPR, HIPAA), consult references\u002Freport-templates.md.\r\n\r\n## Examples\r\n\r\n### Generate a 30-day audit report\r\n\r\n```\r\n\u002Faudit-report\r\nGenerate an audit report for the last 30 days\r\n```\r\n\r\n### Investigate a specific user\r\n\r\n```\r\n\u002Faudit-report\r\nWhat has [REDACTED_EMAIL] been doing in the last 7 days?\r\n```\r\n\r\n### Track production changes\r\n\r\n```\r\n\u002Faudit-report\r\nShow all pipeline and environment changes in the production project this month\r\n```\r\n\r\n### Security investigation\r\n\r\n```\r\n\u002Faudit-report\r\nShow all secret access events and privilege changes from last week\r\n```\r\n\r\n### Compliance evidence\r\n\r\n```\r\n\u002Faudit-report\r\nGenerate SOC2 audit evidence for Q4 covering access control and change management\r\n```\r\n\r\n## Error Handling\r\n\r\n| Error | Cause | Solution |\r\n|-------|-------|----------|\r\n| No audit events returned | Time range too narrow or wrong scope | Broaden time range; verify org_id\u002Fproject_id |\r\n| Access denied | User lacks audit view permissions | Request `core_audit_view` permission |\r\n| Pagination incomplete | More events than page size | Increment `page` parameter until all pages fetched |\r\n| Search term returns nothing | User ID format mismatch | Try email, username, and display name variants |\r\n\r\n## Performance Notes\r\n\r\n- Paginate through all results before generating the report. Incomplete data leads to inaccurate audit trails.\r\n- Cross-reference events across scopes (account, org, project) for a complete picture. Do not skip scope levels.\r\n- For compliance reports, verify every claim against actual audit data. Do not infer or assume activity that is not in the logs.\r\n\r\n## Troubleshooting\r\n\r\n### No Events Found\r\n\r\n1. Start with a broader time range and no filters\r\n2. Verify the org_id and project_id scope -- account-level events require no org\u002Fproject filter\r\n3. Remove search_term to confirm events exist, then re-add filters\r\n\r\n### Missing User Activity\r\n\r\n1. Check both email and username formats for the user\r\n2. Service account activity may appear under a different principal name\r\n3. API key usage may not show as the human user\r\n\r\n### Incomplete Audit Trail\r\n\r\n1. Paginate through all results -- check if `size` returned equals the `size` requested (more pages likely)\r\n2. Account-level events are separate from org\u002Fproject events -- query at the right scope\r\n3. Some event types may require specific permissions to view\r\n",{"name":5,"license":15,"metadata":57,"description":7,"compatibility":61},{"author":58,"version":59,"mcp-server":60},"Harness","1.0.0","harness-mcp-v2","Requires Harness MCP v2 server (harness-mcp-v2)","main","0d1434f89f4bc6b07e9d272accd8c1013768820f","archive\u002Fskill-md-reviewed\u002Fsha256\u002Fad\u002Fad0a843a769e844818b6f6c109a49152136165761aa31b1d703df12410305098",0,"https:\u002F\u002Fgithub.com\u002Fzapabob\u002FSkills","https:\u002F\u002Fgithub.com\u002Fzapabob","The Open University of JAPAN　2019-now\r\n\r\nTokyo University of Science　2007-2010","2026-10-26 16:29:01",{"source":8,"skillName":5,"commands":71,"prompt":81,"zipAvailable":82},[72,75,78],{"tool":73,"command":74},"npx","npx skills add zapabob\u002FSkills --skill audit-report",{"tool":76,"command":77},"bunx","bunx skills add zapabob\u002FSkills --skill audit-report",{"tool":79,"command":80},"pnpm","pnpm dlx skills add zapabob\u002FSkills --skill audit-report","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002Fzapabob\u002FSkills\u002Fblob\u002Fmain\u002Farchive\u002Fskill-md-reviewed\u002Fsha256\u002Fad\u002Fad0a843a769e844818b6f6c109a49152136165761aa31b1d703df12410305098\u002FSKILL.md",true,[],[85,118,152,179,205,222],{"skillNo":86,"name":87,"nameZh":6,"description":88,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":89,"licenseFileUrl":6,"sourceHtmlUrl":90,"categories":91,"keywords":99,"publishedAt":52},"01M6GJTE1GESGGF9K028Y7753E","xurl","X\u002FTwitter via xurl CLI: post, search, DM, media, v2 API.","MIT","https:\u002F\u002Fgithub.com\u002Fzapabob\u002FSkills\u002Fblob\u002Fmain\u002Fregistry\u002Fskills\u002Fxurl\u002Fvariants\u002Fhermes-agent\u002FSKILL.md",[92,95,96],{"categoryNo":93,"categoryName":94,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000010","后端与接口",{"categoryNo":19,"categoryName":20,"taxonomyType":21,"taxonomyTypeDesc":22},{"categoryNo":97,"categoryName":98,"taxonomyType":26,"taxonomyTypeDesc":27},"01JBSEEDCAT000000000000030","开发工程师",[87,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,62,115,116,117],"openclaw","macos","cli","github","linux","windows","official","search","https","social-media","api","Media","hermes","hermes agent","twitter","social","via","post",{"skillNo":119,"name":120,"nameZh":6,"description":121,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":89,"licenseFileUrl":6,"sourceHtmlUrl":122,"categories":123,"keywords":135,"publishedAt":52},"01M6GJT8S1PXQ8WPXT1HSNBWH2","writing-plans","Write implementation plans: bite-sized tasks, paths, code.","https:\u002F\u002Fgithub.com\u002Fzapabob\u002FSkills\u002Fblob\u002Fmain\u002Fregistry\u002Fskills\u002Fwriting-plans\u002Fvariants\u002Fhermes-agent\u002FSKILL.md",[124,127,130,131,132],{"categoryNo":125,"categoryName":126,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000015","视觉设计",{"categoryNo":128,"categoryName":129,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000018","写作与文案",{"categoryNo":19,"categoryName":20,"taxonomyType":21,"taxonomyTypeDesc":22},{"categoryNo":97,"categoryName":98,"taxonomyType":26,"taxonomyTypeDesc":27},{"categoryNo":133,"categoryName":134,"taxonomyType":26,"taxonomyTypeDesc":27},"01JBSEEDCAT000000000000036","内容创作者",[136,137,138,139,101,51,104,140,105,141,142,143,144,145,146,147,148,149,150,151],"writing","writing plans","plans","design","workflow","documentation","tasks","development","code","planning","code-review","subagent","write","superpowers","paths","test-driven-development",{"skillNo":153,"name":154,"nameZh":6,"description":155,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":89,"licenseFileUrl":6,"sourceHtmlUrl":156,"categories":157,"keywords":161,"publishedAt":52},"01M6GJST0H5X7WHBJ3BZK0DVKH","whisper","OpenAI's general-purpose speech recognition model. Supports 99 languages, transcription, translation to English, and language identification. Six model sizes from tiny (39M params) to large (1550M params). Use for speech-to-text, podcast transcription, or multilingual audio processing. Best for robust, multilingual ASR.","https:\u002F\u002Fgithub.com\u002Fzapabob\u002FSkills\u002Fblob\u002Fmain\u002Fregistry\u002Fskills\u002Fwhisper\u002Fvariants\u002Fhermes-agent-optional\u002FSKILL.md",[158],{"categoryNo":159,"categoryName":160,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000016","图像与多媒体",[154,101,104,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178],"openai","speech","multimodal","Transformers","ASR","Audio","text","model","speech recognition","use","general","multilingual","translation","english","identification","processing","Audio Processing",{"skillNo":180,"name":181,"nameZh":6,"description":182,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":89,"licenseFileUrl":6,"sourceHtmlUrl":183,"categories":184,"keywords":188,"publishedAt":52},"01M6GJSMRQ8EETZTYMG72P70EA","weights-and-biases","W&B: log ML experiments, sweeps, model registry, dashboards.","https:\u002F\u002Fgithub.com\u002Fzapabob\u002FSkills\u002Fblob\u002Fmain\u002Fregistry\u002Fskills\u002Fweights-and-biases\u002Fvariants\u002Fhermes-agent\u002FSKILL.md",[185],{"categoryNo":186,"categoryName":187,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000013","分析与可视化",[189,101,190,191,105,192,193,194,195,196,197,169,198,39,199,200,201,202,203,204],"weights and biases","tensorflow","experiments","pytorch","visualization","registry","real-time","tuning","dashboards","experiment","time","Experiment Tracking","Model Registry","Hyperparameter Tuning","WandB","Real-Time Visualization",{"skillNo":206,"name":207,"nameZh":6,"description":208,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":89,"licenseFileUrl":6,"sourceHtmlUrl":209,"categories":210,"keywords":212,"publishedAt":52},"01M6GJS19KDPRY112JTR326S06","watchers","Poll RSS, JSON APIs, and GitHub with watermark dedup.","https:\u002F\u002Fgithub.com\u002Fzapabob\u002FSkills\u002Fblob\u002Fmain\u002Fregistry\u002Fskills\u002Fwatchers\u002Fvariants\u002Fhermes-agent-optional\u002FSKILL.md",[211],{"categoryNo":19,"categoryName":20,"taxonomyType":21,"taxonomyTypeDesc":22},[207,101,213,103,104,214,215,216,217,218,219,112,113,220,221],"terminal","automation","http","monitoring","cron","json","rss","devops","with",{"skillNo":223,"name":224,"nameZh":6,"description":225,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":89,"licenseFileUrl":6,"sourceHtmlUrl":226,"categories":227,"keywords":230,"publishedAt":52},"01M6GJRHJD2A6Q830SWF9W48BC","serving-llms-vllm","vLLM: high-throughput LLM serving, OpenAI API, quantization.","https:\u002F\u002Fgithub.com\u002Fzapabob\u002FSkills\u002Fblob\u002Fmain\u002Fregistry\u002Fskills\u002Fvllm\u002Fvariants\u002Fhermes-agent\u002FSKILL.md",[228,229],{"categoryNo":93,"categoryName":94,"taxonomyType":21,"taxonomyTypeDesc":22},{"categoryNo":97,"categoryName":98,"taxonomyType":26,"taxonomyTypeDesc":27},[231,232,233,104,234,162,235,236,237,165,238,110,239,240,241,242,243,244,245,246],"llms","vLLM","serving llms vllm","research","openai api","tensor","Inference Serving","Production","llm serving","High Throughput","PagedAttention","Continuous Batching","Quantization","Tensor Parallelism","high-throughput","throughput"]