build-audit-logs
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides several
ripgrep(rg) command templates for the agent or user to execute against a local codebase. These commands are designed to audit the application for logging gaps, such as identifying mutating endpoints without audit coverage, finding silent 403 Forbidden errors, and verifying the presence of PII redaction configurations. - [REMOTE_CODE_EXECUTION]: The skill recommends the use of
npx @evlog/cli map --no-writeto automatically analyze audit coverage within a project. This command fetches and executes the@evlog/clipackage from the npm registry at runtime. - [DATA_EXPOSURE]: The skill provides explicit guidance on identifying and redacting sensitive data (PII) like passwords, tokens, and credit card numbers from logs. It includes a standard
auditRedactPresetto help developers prevent accidental credential exposure in audit trails.
Audit Metadata