Audit Log

localskills.sh maintains audit logs at both user and organization level to provide visibility into all platform activity.

Organization audit log

The organization log lives under Organization > Audit Log and requires a role with the audit log read permission (built into owner and admin). It aggregates all member activity: skill and folder changes, invitations, role and team changes, SSO and SCIM events, GitHub Sync, and OIDC token exchanges. Entries are filterable by action type.

The organization audit log showing recent OIDC, role, team, and folder events with actors and timestamps
The organization audit log with its action filter and Organization / Your account scopes.

Your account scope

The same page has a Your account scope, visible to every member, showing activity performed by your own account — skill publishes, token management, profile updates, and CLI logins.

Events tracked

EventDescription
skill.createdNew skill published (web, CLI, or MCP)
skill.updatedSkill settings changed
skill.version_createdNew version pushed (web, CLI, or MCP)
skill.version_importedNew version imported from a GitHub push
skill.created_via_importNew skill created from a GitHub push (new repo directory)
skill.deletedSkill deleted
skill.version_revertedVersion rollback
folder.createdFolder created
folder.updatedFolder renamed or moved
folder.deletedFolder deleted
folder.acl_updatedFolder restriction or access grants changed
mcp_server.createdMCP server registered
mcp_server.importedMCP server imported from the localskills catalog
mcp_server.catalog_updatedUnedited catalog import auto-updated to a new catalog definition
mcp_server.updatedMCP server configuration changed
mcp_server.deletedMCP server removed
user.token_createdAPI token created
user.token_deletedAPI token revoked
user.profile_updatedProfile changes
user.cli_loginCLI device code login
user.anonymous_registeredAnonymous CLI credential registered
organization.createdOrganization created
organization.updatedOrganization settings changed
organization.avatar_uploadedOrganization avatar uploaded
organization.avatar_deletedOrganization avatar removed
organization.member_invitedMember invited to organization
organization.member_joinedMember accepted invitation
organization.auto_join_updatedDomain auto-join enabled or disabled
organization.auto_join_invitation_createdInvitation auto-created for a matching email domain
organization.member_role_updatedMember role changed
organization.token_createdOrganization API token created
organization.token_revokedOrganization API token revoked
team.createdTeam created
team.updatedTeam renamed or roles changed
team.deletedTeam deleted
team.member_addedMember added to a team
team.member_removedMember removed from a team
role.createdCustom role created
role.updatedCustom role permissions changed
role.deletedCustom role deleted
sso.provider_createdSSO provider configured
sso.provider_updatedSSO settings modified
sso.provider_deletedSSO provider removed
sso.login_successSuccessful SSO login
sso.user_createdUser provisioned via SSO
sso.domain_claimedDomain verification started
sso.domain_verifiedDomain ownership verified
sso.domain_removedDomain claim removed
sso.group_mappings_updatedSSO group→team mappings changed
sso.team_syncMember's teams reconciled from IdP groups
scim.provider_createdSCIM provisioning enabled
scim.provider_deletedSCIM provisioning disabled
scim.user_provisionedUser provisioned via SCIM
scim.user_updatedUser updated via SCIM
scim.user_deprovisionedUser removed via SCIM
oidc.policy_createdOIDC trust policy created
oidc.policy_updatedOIDC trust policy updated
oidc.policy_deletedOIDC trust policy deleted
oidc.token_exchangedCI token exchanged via OIDC
github_sync.connectGitHub repo sync connected
github_sync.disconnectGitHub repo sync disconnected
github_sync.manual_syncManual GitHub sync triggered

Retention

Audit log entries are retained for 90 days and auto-purged after that period. Logs are paginated and filterable by action type.

Audit Log — localskills.sh docs