alibaba-actiontrail-audit-analyst SKILL.md skillA

alibaba-actiontrail-audit-analyst from vincentchuwaichow/vanguard-frontier-agentic is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.

Install it, pinned
mdr add vincentchuwaichow/vanguard-frontier-agentic/alibaba-actiontrail-audit-analyst@v0.1.0

Pins v0.1.0 in mdr.lock. Pin the fingerprint instead.

Audit grade
A, 17 of 17 checks passed
Kind
SKILL.md skill
Repository
vincentchuwaichow/vanguard-frontier-agentic
Path
skills/alibaba/alibaba-actiontrail-audit-analyst/SKILL.md
Versions recorded
2
Latest version
v0.1.0, committed Jul 31, 2026
First version recorded
May 9, 2026
Size
3,663 bytes
Repository stars
24
License
Apache-2.0

Query Alibaba Cloud ActionTrail management API call history, build governance audit reports, create SLS-based compliance evidence trails, and detect anomalous admin activity patterns.

Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.

What the file says

# Alibaba Cloud ActionTrail Audit Analyst

## Purpose

Act as the ActionTrail compliance analyst who assumes every unmonitored admin API call and missing SLS integration is a future audit failure until proven otherwise.

## When to use

Use this skill for:

- ActionTrail trail configuration review, event category coverage, and SLS logstore integration
- Management-plane API call history queries: who changed what, when, from where
- Governance audit report generation for MLPS 2.0, SOC 2, ISO 27001, or internal compliance programs
- SLS-based log analytics setup, scheduled SQL alerts, and retention policy governance
- Anomalous admin activity detection: off-hours access, unusual source IPs, high-frequency deletions, privilege escalation patterns
- Compliance evidence packaging for regulatory review
- ActionTrail incidents involving disabled trails, missing logs, or suspected unauthorized admin actions

## Key Alibaba Cloud specifics
…

Read the whole file at its exact version.

How to install

The exact contents, by fingerprint
mdr add vincentchuwaichow/vanguard-frontier-agentic/alibaba-actiontrail-audit-analyst@sha256:b33f105c12cbb65f

The line at the top of this page pins the label v0.1.0, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.

Badge

mdr badge

[![mdr](https://markdownregistry.com/badge/art_jwfui3mlllcqnu5c.svg)](https://markdownregistry.com/a/art_jwfui3mlllcqnu5c)

3 badge image fetches in 30 days. What the badge shows.

Versions

The registry has recorded 2 versions of this file, between May 9, 2026 and Jul 31, 2026, about one every 83 days.

versioncommittedcommitsizeaudit
v0.1.0 latest2026-07-31 e5f8521 3,663 BA view · diff
v0.1.02026-05-09 dc88dab 3,653 BA view

Audit of the latest version

A  17 of 17 checks passed. Fixed automatic checks with no AI involved, so the same checks give the same answer every run.
  • pass: Frontmatter block present
  • pass: Frontmatter declares a name
  • pass: Frontmatter declares a description
  • pass: Size between 200 bytes and 200 KB (3663 bytes)
  • pass: No zero-width or bidi control characters
  • pass: No instruction hidden inside an HTML comment
  • pass: No link to an exfiltration or paste host
  • pass: No credential-shaped string
  • pass: No instruction to send local credentials anywhere
  • pass: No text hidden with inline styles
  • pass: No prompt-injection phrasing
  • pass: No curl or wget piped into a shell
  • pass: No recursive delete of root, home or parent
  • pass: No instruction to read or print local credentials
  • pass: No base64 blob over 200 characters
  • pass: No link to a raw IP address
  • pass: No script tag

Source

GitHub

vincentchuwaichow/vanguard-frontier-agentic · 24 stars · license Apache-2.0 · pushed 2026-10-20 · branch master

API

GET https://markdownregistry.com/api/v1/artifacts/art_jwfui3mlllcqnu5c
GET https://markdownregistry.com/api/v1/resolve?ref=vincentchuwaichow/vanguard-frontier-agentic/alibaba-actiontrail-audit-analyst
GET https://markdownregistry.com/api/v1/blob/b33f105c12cbb65f2e3471e81f76b994c8e8c3a4f120958019fd7bdbc04d5e47

Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.

Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.

More from vincentchuwaichow/vanguard-frontier-agentic

agentic-delegation SKILL.md skill
vincentchuwaichow/vanguard-frontier-agentic · .claude/skills/agentic-delegation/SKILL.md · Plan who does each step of a task in this repo, on which model, at which effort: Haiku or Sonnet subagents for search…
git:20260925.af5b40a · audit A · 24 stars
definition-of-done SKILL.md skill
vincentchuwaichow/vanguard-frontier-agentic · .claude/skills/definition-of-done/SKILL.md · The ordered finish-line runner for any change in this repo — generators, then the asset-integrity refresh last on its…
git:20260710.3fcd452 · audit A · 24 stars
model-registry-refresh SKILL.md skill
vincentchuwaichow/vanguard-frontier-agentic · .claude/skills/model-registry-refresh/SKILL.md · Re-verify and extend catalog/model-registry.json — the fail-closed model-name and reasoning-effort matrix…
git:20260925.a3c9ee6 · audit A · 24 stars
pr-babysit SKILL.md skill
vincentchuwaichow/vanguard-frontier-agentic · .claude/skills/pr-babysit/SKILL.md · The repeatable loop for watching a pull request until it is merged or closed, pairing webhook subscription with a…
git:20260925.a3c9ee6 · audit A · 24 stars
AGENTS.md AGENTS.md file
vincentchuwaichow/vanguard-frontier-agentic · AGENTS.md
git:20260710.f38e17d · audit A · 24 stars
CLAUDE.md CLAUDE.md file
vincentchuwaichow/vanguard-frontier-agentic · CLAUDE.md
git:20261014.e1018a9 · audit A · 24 stars
AGENTS.md@agents AGENTS.md file
vincentchuwaichow/vanguard-frontier-agentic · agents/AGENTS.md
git:20260911.d3b0693 · audit A · 24 stars
AGENTS.md@agents/accounting AGENTS.md file
vincentchuwaichow/vanguard-frontier-agentic · agents/accounting/AGENTS.md
git:20260601.86f3237 · audit A · 24 stars
AGENTS.md@agents/alibaba AGENTS.md file
vincentchuwaichow/vanguard-frontier-agentic · agents/alibaba/AGENTS.md
git:20260509.dc88dab · audit A · 24 stars
AGENTS.md@agents/aws AGENTS.md file
vincentchuwaichow/vanguard-frontier-agentic · agents/aws/AGENTS.md
git:20260429.e2e667e · audit A · 24 stars
AGENTS.md@agents/azure AGENTS.md file
vincentchuwaichow/vanguard-frontier-agentic · agents/azure/AGENTS.md
git:20260430.b3a1abb · audit A · 24 stars
AGENTS.md@agents/finance AGENTS.md file
vincentchuwaichow/vanguard-frontier-agentic · agents/finance/AGENTS.md
git:20260601.86f3237 · audit A · 24 stars

Every file in vincentchuwaichow/vanguard-frontier-agentic

Browse by kind, by grade A, or by owner.