Is this skill suitable for compliance reviews?

Yes, it is specifically designed to assist with security and compliance purposes by providing documented trails of user activity and resource interactions.

Can I filter activity by specific resource types?

Yes, the skill automatically uses activity facets to group actions by resource kind and namespace, allowing you to see exactly which parts of the infrastructure were affected.

How does this skill help with security incidents?

It provides a chronological timeline of user actions and identifies failed operations, helping investigators reconstruct events and identify potential unauthorized access or breaches.

What kind of report does the User Activity Auditor generate?

It generates a structured report including an activity summary, resources touched (by kind and namespace), action types (create/update/delete), and a list of failed operations with status codes.

User Activity Auditor

Name: User Activity Auditor
Author: datum-cloud

bydatum-cloud

•

Security & Testing

Audits and reports on specific user actions across cloud resources to ensure security, accountability, and compliance.

The User Activity Auditor skill enables Claude to perform deep-dive investigations into user behavior within your infrastructure. By aggregating recent activities, identifying failed operations, and categorizing changes by resource kind and namespace, it provides a comprehensive view of any user's footprint. This skill is essential for security teams conducting incident investigations, compliance officers generating audit reports, or administrators needing to troubleshoot permission issues and understand the scope of specific changes.

Key Features

01Comprehensive activity summaries with detailed metadata retrieval

02Resource-specific analysis filtered by kind and namespace

03Automated identification of failed operations and permission errors

042 GitHub stars

05Chronological timeline generation for precise incident reconstruction

06Structured reporting covering creates, updates, and deletes

Use Cases

01Troubleshooting user permission issues by analyzing failed operation logs

02Generating detailed activity reports for regulatory compliance audits

03Investigating unauthorized changes during a security incident

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add datum-cloud/claude-code-plugins audit-user

For use in Claude.ai and ChatGPT

Key Features

01Comprehensive activity summaries with detailed metadata retrieval

02Resource-specific analysis filtered by kind and namespace

03Automated identification of failed operations and permission errors

042 GitHub stars

05Chronological timeline generation for precise incident reconstruction

06Structured reporting covering creates, updates, and deletes

Use Cases

01Troubleshooting user permission issues by analyzing failed operation logs

02Generating detailed activity reports for regulatory compliance audits

03Investigating unauthorized changes during a security incident

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add datum-cloud/claude-code-plugins audit-user

For use in Claude.ai and ChatGPT