메뉴
Session timeline viewer and manual entry recorder for the audit trail.
Codex 또는 Claude로 설치 이 Prompt를 복사해 Codex, Claude 또는 다른 어시스턴트에 붙여 넣으면 Skill 페이지를 검토하고 설치를 진행할 수 있습니다.
SOC 직업 분류 기준
Orchestrate a full multi-agent document review pipeline in one pass — load, evaluate, verify, draft, and audit.
Display the audit trail of all document analysis actions. Use when the user asks to see the "audit trail", "history", or "what we've done".
Evaluate loaded documents against a criteria file, producing a structured findings report. Use when the user asks to "evaluate", "review", or "check" documents against criteria.
Extract, parse, and load documents from a ZIP archive or single file into SQLite + ChromaDB. Use when the user asks to "load", "ingest", or "import" a document.
Use macOS say command for audio notifications when user input is needed, a long task completes, or an error occurs.
Search loaded document clauses using semantic and keyword search. Use when the user asks to "search", "find", or "look up" something in the documents.
| name | audlog |
| description | Session timeline viewer and manual entry recorder for the audit trail. |
| argument-hint | [view [all|N] | add <message>] |
Session timeline — view or add entries to the audit trail.
Query the audit log:
sqlite3 -json "${CLAUDE_PLUGIN_DATA}/documents.db" \
"SELECT id, timestamp, action, actor, detail FROM audit_log ORDER BY id"
Parse JSON detail blobs and render as a table:
## Audit Timeline (showing last 20 of N total)
| # | Time | Action | Actor | Detail |
|---|------------|----------|------------------|-------------------------------------|
| 1 | 20:29:57 | LOAD | document-load | bigco-msa.pdf -> 142 clauses |
| 2 | 20:30:50 | SEARCH | document-search | "intellectual property" -> 10 hits |
| 3 | 20:30:56 | SEARCH | document-search | "cupcakes" -> 3 hits |
_3 entries in audit trail._
Formatting rules:
HH:MM:SS only (drop the date unless entries span multiple days)load: {source} -> {clause_count} clausessearch: "{query}" -> {results} hitseval: {criteria} — {findings} findingsview all, show everything.
If view N, show last N. Always show total count.Showing last 20 of N. Use '/audlog view all' for full trail.Insert a manual entry into the audit log. The user provides a freeform
message; you determine the appropriate action category.
Action categories: load, search, eval, verify, draft, edit,
handoff, decision, note, error.
sqlite3 "${CLAUDE_PLUGIN_DATA}/documents.db" \
"INSERT INTO audit_log (action, detail, actor) VALUES ('<action>', '<user message>', 'user')"
Confirm: "Logged: [action] — "
/audlog — show last 20 entries as table/audlog view all — show full trail/audlog view 5 — show last 5 entries/audlog add switching to broad red-flag criteria — inserts a decision entry/audlog add loaded fresh PDF after regeneration — inserts a load entry/audlog add something looks off in section 12 — inserts a note entry/load-document)