Skip to content
InfratoApp
InfratoApp / Resources / Agent skills / dd-audit-security-investigation

dd-audit-security-investigation

dd-audit-security-investigation is an agent skill published by datadog-labs. It lives in the datadog-labs/agent-skills repository, which has 178 GitHub stars and is licensed under MIT; we last read it on 2026-09-16.

Responds to security questions by identifying who performed actions such as deletions, configuration changes, login activity, and permission modifications, including actions from a specific user or IP address.

Install

skills is a generic installer for any repository of Claude agent skills -- it reads datadog-labs/agent-skills’s own structure rather than assuming one, the same way this page reads the skill’s own SKILL.md rather than assuming a format.

npx skills add datadog-labs/agent-skills

Maintenance

Stars
178
State
listed
Licence
MIT
From the repository

Answer "who did what" security questions from Audit Trail — deletions, config changes, login activity, permission changes, actions from a specific user or IP.

Common questions about dd-audit-security-investigation

What does dd-audit-security-investigation do?
Responds to security questions by identifying who performed actions such as deletions, configuration changes, login activity, and permission modifications, including actions from a specific user or IP address.
How do I install dd-audit-security-investigation?
Run npx skills add datadog-labs/agent-skills. The skills installer reads the repository’s own structure, so it works for any repository of agent skills.
Who publishes dd-audit-security-investigation?
datadog-labs.
Is dd-audit-security-investigation maintained, and what licence does it use?
Its repository has 178 GitHub stars and its state in our directory is listed. Its last commit we recorded was on 2026-10-22. The repository declares the MIT licence.

Learn this on Infrato