Generate audit reports and compliance trails using Harness audit trail data via MCP v2 tools.
$ npx skills add harness/harness-skills --skill audit-report -a claude-codeProject install by default; add -g for ~/.claude/skills/.
$ gh skill install harness/harness-skills audit-report --agent claude-codeProject scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).
$ git clone --depth 1 https://github.com/harness/harness-skills.git skills-src && mkdir -p .claude/skills && cp -r skills-src/skills/audit-report .claude/skills/audit-report && rm -rf skills-srcUse ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.
Claude Code skills documentation · loads skills from .claude/skills/
Install the "audit-report" agent skill from https://github.com/harness/harness-skills/tree/main/skills/audit-report into .claude/skills/audit-report/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "audit-report", then confirm the skill loads.Claude Code copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$skill-installer install https://github.com/harness/harness-skills/tree/main/skills/audit-reportType this inside Codex. $skill-installer <name> installs a curated skill from openai/skills. The installer writes to $CODEX_HOME/skills (default ~/.codex/skills). Restart Codex if the skill does not show up.
$ npx skills add harness/harness-skills --skill audit-report -a codexProject install goes to .agents/skills/; add -g for ~/.codex/skills/.
$ gh skill install harness/harness-skills audit-report --agent codexProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/harness/harness-skills.git skills-src && mkdir -p .agents/skills && cp -r skills-src/skills/audit-report .agents/skills/audit-report && rm -rf skills-srcUse ~/.agents/skills/ instead of .agents/skills for a personal install.
Codex skills documentation · loads skills from .agents/skills/
Install the "audit-report" agent skill from https://github.com/harness/harness-skills/tree/main/skills/audit-report into .agents/skills/audit-report/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "audit-report", then confirm the skill loads.Codex copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add harness/harness-skills --skill audit-report -a cursorProject install goes to .agents/skills/; add -g for ~/.cursor/skills/.
$ gh skill install harness/harness-skills audit-report --agent cursorProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/harness/harness-skills.git skills-src && mkdir -p .cursor/skills && cp -r skills-src/skills/audit-report .cursor/skills/audit-report && rm -rf skills-srcUse ~/.cursor/skills/ instead of .cursor/skills for a personal install.
Cursor skills documentation · loads skills from .cursor/skills/, .agents/skills/, .claude/skills/, .codex/skills/
Install the "audit-report" agent skill from https://github.com/harness/harness-skills/tree/main/skills/audit-report into .cursor/skills/audit-report/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "audit-report", then confirm the skill loads.Cursor copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gemini skills install https://github.com/harness/harness-skills.git --path skills/audit-report--scope user (default) or --scope workspace; --path is the subfolder of the repo that holds the skill; --consent skips the security confirmation prompt.
$ npx skills add harness/harness-skills --skill audit-report -a gemini-cliProject install goes to .agents/skills/; add -g for ~/.gemini/skills/.
$ gh skill install harness/harness-skills audit-report --agent gemini-cliProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/harness/harness-skills.git skills-src && mkdir -p .gemini/skills && cp -r skills-src/skills/audit-report .gemini/skills/audit-report && rm -rf skills-srcUse ~/.gemini/skills/ instead of .gemini/skills for a personal install, then run /skills reload.
Gemini CLI skills documentation · loads skills from .gemini/skills/, .agents/skills/
Install the "audit-report" agent skill from https://github.com/harness/harness-skills/tree/main/skills/audit-report into .gemini/skills/audit-report/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "audit-report", then confirm the skill loads.Gemini CLI copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gh skill install harness/harness-skills audit-reportInstalls for Copilot at project scope by default; add --scope user for a personal install. Preview a skill first with gh skill preview. Needs GitHub CLI 2.90.0 or later (public preview).
$ npx skills add harness/harness-skills --skill audit-report -a github-copilotProject install goes to .agents/skills/; add -g for ~/.copilot/skills/.
$ git clone --depth 1 https://github.com/harness/harness-skills.git skills-src && mkdir -p .github/skills && cp -r skills-src/skills/audit-report .github/skills/audit-report && rm -rf skills-srcUse ~/.copilot/skills/ instead of .github/skills for a personal install. Commit .github/skills so cloud agent and code review can use it.
GitHub Copilot skills documentation · loads skills from .github/skills/, .claude/skills/, .agents/skills/
Install the "audit-report" agent skill from https://github.com/harness/harness-skills/tree/main/skills/audit-report into .github/skills/audit-report/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "audit-report", then confirm the skill loads.GitHub Copilot copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add harness/harness-skills --skill audit-report -a opencodeOpenCode documents no install command of its own. Project install goes to .agents/skills/; add -g for ~/.config/opencode/skills/.
$ gh skill install harness/harness-skills audit-report --agent opencodeProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/harness/harness-skills.git skills-src && mkdir -p .opencode/skills && cp -r skills-src/skills/audit-report .opencode/skills/audit-report && rm -rf skills-srcUse ~/.config/opencode/skills/ instead of .opencode/skills for a personal install.
OpenCode skills documentation · loads skills from .opencode/skills/, .claude/skills/, .agents/skills/
Install the "audit-report" agent skill from https://github.com/harness/harness-skills/tree/main/skills/audit-report into .opencode/skills/audit-report/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "audit-report", then confirm the skill loads.OpenCode copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
audit-reportGenerate audit reports and compliance trails using Harness audit trail data via MCP v2 tools.
Audit Report is an agent skill from harness/harness-skills. Generate audit reports and compliance trails using Harness audit trail data via MCP v2 tools. Track user actions, resource changes, authentication events, and access patterns across accounts, organizations, and projects. Use when asked to audit activity, generate compliance reports, investigate security incidents, review user actions, check change logs, or produce SOC2/GDPR/HIPAA audit evidence. Trigger phrases: audit report, audit trail, compliance audit, user activity log, change log, access audit, security…
Its SKILL.md is about 1.3k tokens, which your agent loads only when the skill is triggered. The skill folder holds 2 other files, including reference files (for example `references/report-templates.md`). Compatibility notes: Requires Harness MCP v2 server (harness-mcp-v2)
It sits in Legal & Compliance, covering SOC 2 and security compliance, Access reviews and audit trails and Privacy and GDPR. It works with Model Context Protocol. The repository describes itself as: A collection of structured AI agent skills that enable Claude Code, Cursor, GitHub Copilot, and other AI coding assistants to create, operate, debug, and govern Harness CI/CD… The licence is Apache-2.0.
6 steps, taken from the step headings in SKILL.md.
Read from SKILL.md and the folder at commit c25faee. It shows what the files ask for, not the result of running them.
Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.
From allowed-tools in the SKILL.md frontmatter.
No scripts in the folder and no shell commands in SKILL.md.
From the folder's file list and the shell code blocks in SKILL.md.
No URLs in SKILL.md.
From URLs in SKILL.md, links to its own repository left out.
Names no API keys, tokens, secrets or passwords.
From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.
Requires Harness MCP v2 server (harness-mcp-v2)
From compatibility in the SKILL.md frontmatter.
Audit Report loads about 1.3k tokens when it runs, and up to ~2.1k if it reads all its reference files. Until then it costs about 144 tokens; SKILL.md has 465 words of instructions outside code blocks.
Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.
The automated check found no risky patterns in SKILL.md.
Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.
The full file from harness/harness-skills at commit c25faee, republished under its Apache-2.0 licence (© harness). 465 words, ~1,317 tokens.
.claude/skills/audit-report/SKILL.md (or your agent's skills folder). This skill also uses 1 other file; get the full folder from GitHub.Generate audit reports and compliance trails using Harness MCP v2 tools.
harness_list with resource_type: "audit_event" -- list audit events with filtersharness_describe with resource_type: "audit_event" -- discover available filters and fieldsAudit events are read-only. You can list and filter them but cannot create, update, or delete them.
harness_describe(resource_type="audit_event")Understand the available filter parameters before querying.
harness_list(
resource_type="audit_event",
org_id="<org>", # optional - scope to organization
project_id="<project>", # optional - scope to project
search_term="<user or resource>", # optional
page=0,
size=100
)Filter results by these standard action types:
| Action | Description |
|---|---|
CREATE | Resource creation |
UPDATE | Resource modification |
DELETE | Resource deletion |
LOGIN | User authentication |
LOGOUT | Session termination |
ACCESS | Resource access |
EXECUTE | Pipeline execution |
Common resource types in audit events:
| Resource Type | Examples |
|---|---|
PIPELINE | Pipeline create, update, delete |
SECRET | Secret access, rotation, deletion |
CONNECTOR | Connector modifications |
SERVICE | Service definition changes |
ENVIRONMENT | Environment configuration changes |
USER | User management actions |
ROLE | Role assignment changes |
USER_GROUP | Group membership changes |
Format findings using the templates in references/report-templates.md.
For report templates (General, User Activity, Security) and compliance framework mappings (SOC 2, GDPR, HIPAA), consult references/report-templates.md.
/audit-report
Generate an audit report for the last 30 days/audit-report
What has john.doe@company.com been doing in the last 7 days?/audit-report
Show all pipeline and environment changes in the production project this month/audit-report
Show all secret access events and privilege changes from last week/audit-report
Generate SOC2 audit evidence for Q4 covering access control and change management| Error | Cause | Solution |
|---|---|---|
| No audit events returned | Time range too narrow or wrong scope | Broaden time range; verify org_id/project_id |
| Access denied | User lacks audit view permissions | Request core_audit_view permission |
| Pagination incomplete | More events than page size | Increment page parameter until all pages fetched |
| Search term returns nothing | User ID format mismatch | Try email, username, and display name variants |
size returned equals the size requested (more pages likely)© harness, Apache-2.0. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file
SKILL.md and 1 other file (references) in skills/audit-report of harness/harness-skills.
Open the folder on GitHubat commit c25faee
Audit Report next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.
| Skill | Stars | Used in | Tokens | Auto-check | Licence | Repo updated |
|---|---|---|---|---|---|---|
| Audit Report this skillharness/harness-skills | 115 | — | ~1.3k | Automated safety check: Pass | Apache-2.0 | |
| Cis ControlsSushegaad/Claude-Skills-Governance-Risk-and-Compliance | 942 | 1 repos | ~4.2k | Automated safety check: Pass | MIT | |
| Security Compliancesangrokjung/claude-forge | 850 | 2 repos | ~7.2k | Automated safety check: Pass | MIT | |
| Ciso Advisoralirezarezvani/claude-skills | 28k | 1 repos | ~1.8k | Automated safety check: Pass | MIT | |
| ComplianceRightNow-AI/openfang | 18k | — | ~921 | Automated safety check: Pass | Apache-2.0 | |
| Eks Securityaws-samples/appmod-blueprints | 113 | — | ~4.7k | Automated safety check: Pass | MIT-0 |
Sushegaad/Claude-Skills-Governance-Risk-and-Compliance
Expert CIS Controls v8 (CIS Top 18) advisor — implementation group scoping (IG1/IG2/IG3), control gap assessments, safeguard-level guidance, asset inventory, software inventory, data protection…
sangrokjung/claude-forge
Guides security professionals in implementing defense-in-depth security architectures, achieving compliance with industry frameworks (SOC2, ISO27001, GDPR, HIPAA), conducting threat modeling and…
alirezarezvani/claude-skills
Security leadership for growth-stage companies. An agent skill from alirezarezvani/claude-skills.
RightNow-AI/openfang
Compliance expert for SOC 2, GDPR, HIPAA, PCI-DSS, and security frameworks
aws-samples/appmod-blueprints
A skill your agent uses whenever someone needs security or compliance guidance for Amazon EKS — phrased as "CIS Benchmark for EKS", "HIPAA / PCI-DSS / FedRAMP / SOC 2 / GDPR on EKS", "harden my EKS…
AgentSecOps/SecOpsAgentKit
Policy-as-code enforcement and compliance validation using Open Policy Agent (OPA).
harness/harness-skills
A skill your agent uses when working with Chaos Engineering steps inside a Harness pipeline.
harness/harness-skills
A skill your agent uses when the user asks to create, edit, update, design, or configure a Harness Chaos Experiment — including faults, probes, actions, experiment YAML, fault injection, pod-delete…
harness/harness-skills
Remove a launched Harness FME feature flag from application code, keeping the treatment FME serves today, and open a pull request.
harness/harness-skills
Configure code scanning in Harness pipelines using STO security scanners.
harness/harness-skills
Generate Harness Agent Template files for AI-powered automation agents.
harness/harness-skills
Create a Harness FME metric: helps decide what to measure, suggests candidate metrics from application code, resolves traffic type and event type IDs, drafts the payload, then creates.
Works with
Categories
Generate audit reports and compliance trails using Harness audit trail data via MCP v2 tools. Audit Report is an agent skill from harness/harness-skills. Generate audit reports and compliance trails using Harness audit trail data via MCP v2 tools.
Audit Report fits situations like: asked to audit activity; generate compliance reports; investigate security incidents; review user actions.
Run `npx skills add harness/harness-skills --skill audit-report -a claude-code`. Or copy the skill folder (skills/audit-report in harness/harness-skills) into .claude/skills/audit-report in your project. Claude Code loads it when a task matches its description.
Run `npx skills add harness/harness-skills --skill audit-report -a codex`. Or copy the skill folder (skills/audit-report in harness/harness-skills) into .agents/skills/audit-report in your project. Codex loads it when a task matches its description.
Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add harness/harness-skills --skill audit-report -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/audit-report, .gemini/skills/audit-report, .github/skills/audit-report and .opencode/skills/audit-report in your project.
SKILL.md names no scripts, command-line tools or credentials: Audit Report is instructions for the agent only. Compatibility (from SKILL.md): Requires Harness MCP v2 server (harness-mcp-v2).
SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.
Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.
Audit Report is published under the Apache-2.0 licence (declared in SKILL.md). It allows redistribution, so the full SKILL.md is shown on this page.
About 1.3k tokens (SKILL.md is roughly 5.3k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full. Its references folder adds about 794 tokens, read only when the agent opens those files.
Skills that share tags, products or a category with Audit Report: Cis Controls (Sushegaad/Claude-Skills-Governance-Risk-and-Compliance, 942 stars), Security Compliance (sangrokjung/claude-forge, 850 stars), Ciso Advisor (alirezarezvani/claude-skills, 28k stars) and Compliance (RightNow-AI/openfang, 18k stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.
harness (a GitHub organization) maintains it in harness/harness-skills, which has 115 GitHub stars. The repository holds 24 skills in this directory. The repository was last updated on October 6, 2026.
Source: harness/harness-skills on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.
