Audit Skill
Query and review audit trail logs for transparency and decision tracing
Commands
| Command | Description | Example |
|---|---|---|
/audit log |
Show recent audit entries | /audit log |
/audit search [query] |
Search audit logs by keyword | /audit search "deploy" |
/audit summary |
Summarize audit activity | /audit summary --from 2026-04-01 |
MCP Integration
This skill uses the bkit_audit_query MCP tool to retrieve audit data.
How to Execute
Show Recent Logs
- Call
bkit_audit_querywith actionlist - Display results in a table format with timestamp, type, and summary
- Call
Search Logs
- Call
bkit_audit_querywith actionsearchand the user's query - Filter by date range if
--fromand--toare provided - Filter by type if
--typeis provided (e.g.,decision,action,error)
- Call
Generate Summary
- Call
bkit_audit_querywith actionsummary - Aggregate entries by type and provide counts
- Highlight key decisions and their outcomes
- Call
Audit Entry Types
| Type | Description |
|---|---|
decision |
Agent decision points with rationale |
action |
File modifications, tool invocations |
error |
Errors encountered during execution |
checkpoint |
Checkpoint creation/restoration events |
pdca |
PDCA phase transitions |
Output Format
## Audit Log Report
### Period: {from} to {to}
| Timestamp | Type | Summary |
|-----------|------|---------|
| 2026-04-09 14:23 | decision | Selected gap-detector agent for verification |
| 2026-04-09 14:24 | action | Modified src/api/auth.js (lines 45-67) |
### Statistics
- Total entries: N
- Decisions: N | Actions: N | Errors: N
Data Location
Audit logs are stored in .bkit/audit/ directory:
.bkit/audit/sessions/- Per-session audit trails.bkit/audit/decisions/- Decision trace records
Integration with PDCA
Audit is part of the Check phase:
- Use
/audit summaryto review what happened during Do phase - Cross-reference with
/pdca analyzeresults - Verify all decisions align with the Design document