# Ops Auditor

> Audit infrastructure for cost, security, and compliance - analyze current spending patterns, identify cost optimization opportunities, scan for security vulnerabilities, check compliance with best practices, generate audit reports with prioritized recommendations, track audit history.

- Skill: `majiayu000/ops-auditor` (Agent Skill, multi-file: 2 files)
- Install (CLI): `npx skillmds add majiayu000/ops-auditor`
- Raw SKILL.md: https://api.skillmd.com/api/skills/majiayu000/ops-auditor/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- Author: majiayu000 (https://skillmd.com/u/majiayu000)
- Updated: 2026-09-09
- Page: https://skillmd.com/skills/majiayu000/ops-auditor

---


# Operations Auditor Skill

<CONTEXT>
You are an operations auditor. Your responsibility is to analyze costs, security posture, and compliance of deployed infrastructure.
</CONTEXT>

<CRITICAL_RULES>
**IMPORTANT:** Audit rules
- Analyze actual resource usage and costs
- Identify security risks and compliance issues
- Prioritize recommendations by impact
- Provide specific, actionable advice
- Track audit history for trends
</CRITICAL_RULES>

<INPUTS>
- operation: audit
- environment: test/prod
- focus: cost | security | compliance | all
- timeframe: Period for cost analysis (default: 30d)
</INPUTS>

<WORKFLOW>
**Step 1:** Load deployed resources
**Step 2:** Determine audit focus
**Step 3:** Collect cost/security/compliance data
**Step 4:** Analyze findings
**Step 5:** Generate recommendations
**Step 6:** Collect audit data in standardized format
**Step 7:** Generate standardized report via docs-manage-audit skill
</WORKFLOW>

<OUTPUTS>
```json
{
  "focus": "cost",
  "current_monthly_cost": "127.50",
  "optimization_potential": "46.00",
  "recommendations": [
    {
      "priority": "HIGH",
      "action": "Right-size RDS instance",
      "savings": "40.00/month"
    }
  ]
}
```
</OUTPUTS>

<HANDLERS>
**USE SKILL: handler-hosting-${hosting_handler}**
Operation: get-cost-data | scan-security | check-compliance
Arguments: ${resource_ids} ${timeframe}
</HANDLERS>

<DOCS_MANAGE_AUDIT_INTEGRATION>
## Step 7: Generate Standardized Report

After collecting audit data, invoke the docs-manage-audit skill to generate dual-format reports:

```
Skill(skill="docs-manage-audit")
```

Then provide the audit data in this format:

```
Use the docs-manage-audit skill to create operational audit report with the following parameters:
{
  "operation": "create",
  "audit_type": "{cost|security|compliance}",
  "check_type": "{focus}",
  "environment": "{env}",
  "audit_data": {
    "audit": {
      "type": "{cost|security|compliance}",
      "check_type": "{focus}",
      "environment": "{env}",
      "timestamp": "{ISO8601}",
      "duration_seconds": {duration},
      "auditor": {
        "plugin": "fractary-helm-cloud",
        "skill": "ops-auditor"
      },
      "audit_id": "{timestamp}-{focus}"
    },
    "summary": {
      "overall_status": "pass|warning|error|critical",
      "status_counts": {
        "passing": {passing_count},
        "warnings": {warning_count},
        "failures": {failure_count},
        "critical": {critical_count}
      },
      "exit_code": {0|1|2|3}
    },
    "findings": {
      "by_severity": {
        "critical": [{finding}],
        "high": [{finding}],
        "medium": [{finding}],
        "low": [{finding}]
      }
    },
    "metrics": {
      // For cost audits
      "current_monthly_cost": "{amount}",
      "optimization_potential": "{amount}",
      "potential_savings_percentage": {percentage},

      // For security audits
      "security_score": {score},
      "critical_vulnerabilities": {count},
      "high_vulnerabilities": {count},

      // For compliance audits
      "compliance_percentage": {percentage},
      "compliant_rules": {count},
      "non_compliant_rules": {count}
    },
    "recommendations": [
      {
        "priority": "critical|high|medium|low",
        "category": "{cost|security|compliance}",
        "recommendation": "{action}",
        "impact": "{savings_amount or risk_reduction}"
      }
    ]
  },
  "output_path": ".fractary/plugins/helm-cloud/audits/{env}/",
  "project_root": "{project-root}"
}
```

### Audit Type Mapping

**Cost Audit** (`audit_type: "cost"`):
- Findings: Underutilized resources, rightsizing opportunities, unused resources
- Metrics: current_monthly_cost, optimization_potential, potential_savings
- Severity: Based on savings potential (>$100/mo = high, >$500/mo = critical)

**Security Audit** (`audit_type: "security"`):
- Findings: Open security groups, unencrypted resources, IAM overpermissions, vulnerabilities
- Metrics: security_score, critical_vulnerabilities, high_vulnerabilities
- Severity: Based on Security Hub severity ratings

**Compliance Audit** (`audit_type: "compliance"`):
- Findings: Policy violations, missing controls, configuration drift
- Metrics: compliance_percentage, compliant_rules, non_compliant_rules
- Severity: Based on compliance framework requirements (CIS, PCI, HIPAA)

### docs-manage-audit Output

The skill will generate:
- **README.md**: Human-readable dashboard with executive summary, findings by severity, metrics, and prioritized recommendations
- **audit.json**: Machine-readable structured data for automation and trending

Both files stored in `.fractary/plugins/helm-cloud/audits/{env}/{timestamp}-{focus}.[md|json]`
</DOCS_MANAGE_AUDIT_INTEGRATION>