See it in action
One of 3 test cases the skill fixed. Same model, same prompt, with and without the skill.
PromptAfter finishing an observability pass over the authentication service, what summary record should be logged to track the audit action itself?
What was checked, without and with the skill| Checked | Without skill | With skill |
|---|
| Records telemetry with skill identifier backend/observability-audit. | Missed | Passed |
|---|
| Includes touched area categories alongside outcome status. | Passed | Passed |
|---|
What's inside
The instructions your model reads when the skill loads.
SKILL.md85 linessingle file
Skill: backend/observability-audit
Purpose
Improve and standardize observability so the system is operable after changes:
- logs: structured, queryable, minimal but sufficient
- metrics: counters/timers/gauges for key outcomes
- traces: propagation and spans where available
- audit: records for sensitive actions when required
This skill is a pass over changed behavior, not feature work.
Inputs
- Changed components/endpoints/jobs
- Risk posture (from repo docs/profile if present)
- Observability standards (from
REPO_PROFILE.json if present)
- Correlation/id propagation standard (if any)
Outputs
- Improved logging:
- include correlation id
- include primary identifiers (request id, user id where safe, entity id)
- include outcome + error codes
- Metrics updates if repo uses them:
- success/fail counters
- latency timing
- queue depth / retries (for jobs)
- Tracing spans or propagation fixes if repo uses tracing
- Audit entries for protected actions if applicable
Non-goals
- Implementing business logic
- Adding heavy instrumentation everywhere
- Logging secrets or sensitive payloads
Track record
Benchmark
17 / 21
test cases passed, vs 14 / 21 without
Adoption
- Users
- 0
- Times used
- 0
Safety and source details
SkillSafety
✓ 3 of 3 passed✓Code scan15 of 15 checks clean
0 critical · 0 warning · 0 info — scanner v4 — 8/1/2026
View 15 scanner checks
live_secretremote_code_executionreverse_shelldata_exfiltrationssrf_metadataagent_snoopinganti_refusaldestructive_commandsobfuscated_unicodeunicode_homoglyphopaque_blobsuspicious_urltool_overreachtrigger_abuseprompt_injection_phrasing
✓IntentSafe
LLM judge · does the skill do what it claims
✓ContentClean
LLM judge · policy & harmful-content review
Source
Importedvelcrafting / codex-skills
skills/backend/observability-audit/SKILL.md
View on GitHub ↗Imported 8/1/2026Version v1