Operations Auditor Skill
After collecting audit data, invoke the docs-manage-audit skill to generate dual-format reports:
Skill(skill="docs-manage-audit")
Then provide the audit data in this format:
Use the docs-manage-audit skill to create operational audit report with the following parameters:
{
"operation": "create",
"audit_type": "{cost|security|compliance}",
"check_type": "{focus}",
"environment": "{env}",
"audit_data": {
"audit": {
"type": "{cost|security|compliance}",
"check_type": "{focus}",
"environment": "{env}",
"timestamp": "{ISO8601}",
"duration_seconds": {duration},
"auditor": {
"plugin": "fractary-helm-cloud",
"skill": "ops-auditor"
},
"audit_id": "{timestamp}-{focus}"
},
"summary": {
"overall_status": "pass|warning|error|critical",
"status_counts": {
"passing": {passing_count},
"warnings": {warning_count},
"failures": {failure_count},
"critical": {critical_count}
},
"exit_code": {0|1|2|3}
},
"findings": {
"by_severity": {
"critical": [{finding}],
"high": [{finding}],
"medium": [{finding}],
"low": [{finding}]
}
},
"metrics": {
// For cost audits
"current_monthly_cost": "{amount}",
"optimization_potential": "{amount}",
"potential_savings_percentage": {percentage},
// For security audits
"security_score": {score},
"critical_vulnerabilities": {count},
"high_vulnerabilities": {count},
// For compliance audits
"compliance_percentage": {percentage},
"compliant_rules": {count},
"non_compliant_rules": {count}
},
"recommendations": [
{
"priority": "critical|high|medium|low",
"category": "{cost|security|compliance}",
"recommendation": "{action}",
"impact": "{savings_amount or risk_reduction}"
}
]
},
"output_path": ".fractary/plugins/helm-cloud/audits/{env}/",
"project_root": "{project-root}"
}
Audit Type Mapping
Cost Audit (audit_type: "cost"):
- Findings: Underutilized resources, rightsizing opportunities, unused resources
- Metrics: current_monthly_cost, optimization_potential, potential_savings
- Severity: Based on savings potential (>$100/mo = high, >$500/mo = critical)
Security Audit (audit_type: "security"):
- Findings: Open security groups, unencrypted resources, IAM overpermissions, vulnerabilities
- Metrics: security_score, critical_vulnerabilities, high_vulnerabilities
- Severity: Based on Security Hub severity ratings
Compliance Audit (audit_type: "compliance"):
- Findings: Policy violations, missing controls, configuration drift
- Metrics: compliance_percentage, compliant_rules, non_compliant_rules
- Severity: Based on compliance framework requirements (CIS, PCI, HIPAA)
docs-manage-audit Output
The skill will generate:
- README.md: Human-readable dashboard with executive summary, findings by severity, metrics, and prioritized recommendations
- audit.json: Machine-readable structured data for automation and trending
Both files stored in .fractary/plugins/helm-cloud/audits/{env}/{timestamp}-{focus}.[md|json]
1---2name: ops-auditor3description: Audit infrastructure for cost, security, and compliance - analyze current spending patterns, identify cost optimization opportunities, scan for security vulnerabilities, check compliance with best practices, generate audit reports with prioritized recommendations, track audit history.4---5
6# Operations Auditor Skill
7
8<CONTEXT>
9You are an operations auditor. Your responsibility is to analyze costs, security posture, and compliance of deployed infrastructure.
10</CONTEXT>
11
12<CRITICAL_RULES>
13**IMPORTANT:** Audit rules
14- Analyze actual resource usage and costs
15- Identify security risks and compliance issues
16- Prioritize recommendations by impact
17- Provide specific, actionable advice
18- Track audit history for trends
19</CRITICAL_RULES>
20
21<INPUTS>
22- operation: audit
23- environment: test/prod
24- focus: cost | security | compliance | all
25- timeframe: Period for cost analysis (default: 30d)
26</INPUTS>
27
28<WORKFLOW>
29**Step 1:** Load deployed resources
30**Step 2:** Determine audit focus
31**Step 3:** Collect cost/security/compliance data
32**Step 4:** Analyze findings
33**Step 5:** Generate recommendations
34**Step 6:** Collect audit data in standardized format
35**Step 7:** Generate standardized report via docs-manage-audit skill
36</WORKFLOW>
37
38<OUTPUTS>
39```json
40{
41 "focus": "cost",
42 "current_monthly_cost": "127.50",
43 "optimization_potential": "46.00",
44 "recommendations": [
45 {
46 "priority": "HIGH",
47 "action": "Right-size RDS instance",
48 "savings": "40.00/month"
49 }
50 ]
51}
52```
53</OUTPUTS>
54
55<HANDLERS>
56**USE SKILL: handler-hosting-${hosting_handler}**
57Operation: get-cost-data | scan-security | check-compliance
58Arguments: ${resource_ids} ${timeframe}
59</HANDLERS>
60
61<DOCS_MANAGE_AUDIT_INTEGRATION>
62## Step 7: Generate Standardized Report
63
64After collecting audit data, invoke the docs-manage-audit skill to generate dual-format reports:
65
66```
67Skill(skill="docs-manage-audit")
68```
69
70Then provide the audit data in this format:
71
72```
73Use the docs-manage-audit skill to create operational audit report with the following parameters:
74{
75 "operation": "create",
76 "audit_type": "{cost|security|compliance}",
77 "check_type": "{focus}",
78 "environment": "{env}",
79 "audit_data": {
80 "audit": {
81 "type": "{cost|security|compliance}",
82 "check_type": "{focus}",
83 "environment": "{env}",
84 "timestamp": "{ISO8601}",
85 "duration_seconds": {duration},
86 "auditor": {
87 "plugin": "fractary-helm-cloud",
88 "skill": "ops-auditor"
89 },
90 "audit_id": "{timestamp}-{focus}"
91 },
92 "summary": {
93 "overall_status": "pass|warning|error|critical",
94 "status_counts": {
95 "passing": {passing_count},
96 "warnings": {warning_count},
97 "failures": {failure_count},
98 "critical": {critical_count}
99 },
100 "exit_code": {0|1|2|3}
101 },
102 "findings": {
103 "by_severity": {
104 "critical": [{finding}],
105 "high": [{finding}],
106 "medium": [{finding}],
107 "low": [{finding}]
108 }
109 },
110 "metrics": {
111 // For cost audits
112 "current_monthly_cost": "{amount}",
113 "optimization_potential": "{amount}",
114 "potential_savings_percentage": {percentage},
115
116 // For security audits
117 "security_score": {score},
118 "critical_vulnerabilities": {count},
119 "high_vulnerabilities": {count},
120
121 // For compliance audits
122 "compliance_percentage": {percentage},
123 "compliant_rules": {count},
124 "non_compliant_rules": {count}
125 },
126 "recommendations": [
127 {
128 "priority": "critical|high|medium|low",
129 "category": "{cost|security|compliance}",
130 "recommendation": "{action}",
131 "impact": "{savings_amount or risk_reduction}"
132 }
133 ]
134 },
135 "output_path": ".fractary/plugins/helm-cloud/audits/{env}/",
136 "project_root": "{project-root}"
137}
138```
139
140### Audit Type Mapping
141
142**Cost Audit** (`audit_type: "cost"`):
143- Findings: Underutilized resources, rightsizing opportunities, unused resources
144- Metrics: current_monthly_cost, optimization_potential, potential_savings
145- Severity: Based on savings potential (>$100/mo = high, >$500/mo = critical)
146
147**Security Audit** (`audit_type: "security"`):
148- Findings: Open security groups, unencrypted resources, IAM overpermissions, vulnerabilities
149- Metrics: security_score, critical_vulnerabilities, high_vulnerabilities
150- Severity: Based on Security Hub severity ratings
151
152**Compliance Audit** (`audit_type: "compliance"`):
153- Findings: Policy violations, missing controls, configuration drift
154- Metrics: compliance_percentage, compliant_rules, non_compliant_rules
155- Severity: Based on compliance framework requirements (CIS, PCI, HIPAA)
156
157### docs-manage-audit Output
158
159The skill will generate:
160- **README.md**: Human-readable dashboard with executive summary, findings by severity, metrics, and prioritized recommendations
161- **audit.json**: Machine-readable structured data for automation and trending
162
163Both files stored in `.fractary/plugins/helm-cloud/audits/{env}/{timestamp}-{focus}.[md|json]`
164</DOCS_MANAGE_AUDIT_INTEGRATION>
majiayu000