CtrlK
BlogDocsLog inGet started
Tessl Logo

configuring-audit-logging

Configures SQL audit logging on CockroachDB clusters to capture security-relevant events including authentication, privilege changes, and sensitive data access. Use when enabling audit logging for compliance, setting up role-based audit policies, or verifying audit configuration.

90

Quality

88%

Does it follow best practices?

Impact

Pending

No eval scenarios have been run

SecuritybySnyk

Passed

No known issues

SKILL.md
Quality
Evals
Security

Quality

Discovery

100%

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

This is a well-crafted skill description that clearly identifies the specific technology (CockroachDB), the specific capability (SQL audit logging), and the concrete use cases. It includes an explicit 'Use when' clause with natural trigger terms and is highly distinctive, making it easy for Claude to select appropriately from a large skill set.

DimensionReasoningScore

Specificity

Lists multiple specific concrete actions: configuring SQL audit logging, capturing authentication events, privilege changes, sensitive data access, setting up role-based audit policies, and verifying audit configuration.

3 / 3

Completeness

Clearly answers both 'what' (configures SQL audit logging to capture security-relevant events) and 'when' (explicit 'Use when' clause covering enabling audit logging for compliance, setting up role-based audit policies, or verifying audit configuration).

3 / 3

Trigger Term Quality

Includes strong natural keywords users would say: 'audit logging', 'CockroachDB', 'compliance', 'authentication', 'privilege changes', 'sensitive data access', 'role-based audit policies'. These cover the domain well with terms users would naturally use.

3 / 3

Distinctiveness Conflict Risk

Highly distinctive with a clear niche: SQL audit logging specifically on CockroachDB clusters. The combination of CockroachDB + audit logging + compliance creates a very specific domain unlikely to conflict with other skills.

3 / 3

Total

12

/

12

Passed

Implementation

77%

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

This is a well-structured, actionable skill with clear step-by-step workflows and executable SQL commands throughout. Its main weakness is moderate verbosity—some explanatory text and the detailed performance/storage impact tables could be condensed. The progressive disclosure is adequate but the referenced bundle file (references/sql-queries.md) is not provided, making it impossible to fully validate the reference structure.

Suggestions

Condense the 'What is captured' bullet list and storage impact estimates into briefer inline notes or move them to a reference file to improve conciseness.

Ensure the referenced file 'references/sql-queries.md' exists in the bundle to support the progressive disclosure structure.

DimensionReasoningScore

Conciseness

The skill includes some unnecessary explanation (e.g., 'Admin audit logging captures all SQL statements executed by users with the admin role' before showing the command, the 'What is captured' list, and the detailed storage impact estimates). The safety considerations table and storage planning section, while useful, add bulk. However, most content is relevant and not egregiously verbose.

2 / 3

Actionability

All guidance is concrete with executable SQL commands that are copy-paste ready. The skill provides specific cluster settings, exact syntax for role-based audit configuration, verification commands, and rollback procedures. Multiple roles example with newline-separated format is particularly helpful.

3 / 3

Workflow Clarity

Steps are clearly sequenced from checking current config → enabling admin audit → configuring role-based audit → supplemental logging → verification. The verification step (Step 5) serves as an explicit validation checkpoint. Rollback procedures are provided for error recovery. The workflow follows a logical progression from least to most impactful changes.

3 / 3

Progressive Disclosure

The skill references sql-queries.md and related skills appropriately, but the bundle has no files to support these references. The main content is somewhat long with the safety considerations and storage impact sections inline rather than in a reference file. However, the structure is reasonable with clear section headers and the references section is well-organized.

2 / 3

Total

10

/

12

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation11 / 11 Passed

Validation for skill structure

No warnings or errors.

Repository
cockroachlabs/cockroachdb-skills
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.