Skip to main content
affpapa.org
RU EN
subagent

ai-agent-audit-specialist — Claude Code subagent: setup and usage

Designs tamper-evident audit trails and compliance mappings for AI coding tools under HIPAA, SOC 2, and EU AI Act rules.

Install into Claude Code · claude-code-templates All methods and platforms ↓ 
npx claude-code-templates@latest --agent security/ai-agent-audit-specialist
Open on GitHub

What ai-agent-audit-specialist does

This subagent translates compliance mandates into forensic logging architectures for AI assistants like Claude Code, Cursor, Codex CLI, and Aider. It organizes event capture around agent lifecycles (UserPromptSubmit, PreToolUse, PostToolUse, session boundaries) and connects them to regulatory requirements such as HIPAA §164.312(b), SOC 2 CC7.2, and EU AI Act Annex IV.

It operates using Read, Grep, Glob, and Bash tools. The resulting design specifies append-only JSONL files, SHA-256 hash chaining, system-level immutability via chattr +a or chflags uappnd, SIEM pipelines (Splunk HEC, Elastic), and re-verification checks for audit teams.

Log files function as legal evidence: any log rotation that severs the hash sequence or any silent hook disabling in settings.json invalidates the entire verification chain.

What it helps with

  • design tamper-evident audit pipelines for AI coding agents
  • map agent hook events directly to SOC 2 and HIPAA controls
  • draft logging architecture documentation for EU AI Act Annex IV
  • generate scripts for auditors to verify cryptographic hash chains

Example prompts for the agent

  • Design an audit architecture capturing Claude Code tool runs and diffs for HIPAA compliance
  • Build a SOC 2 CC7.2 evidence plan with continuous monitoring for coding agents
  • Draft an EU AI Act Annex IV logging description covering event taxonomy and retention

How to install ai-agent-audit-specialist

1claude-code-templates

npx claude-code-templates@latest --agent security/ai-agent-audit-specialist

2Manually: put the files in place

.claude/agents/ai-agent-audit-specialist.md

For all projects use ~/.claude/agents/. Claude delegates by the description field or an @-mention

Step by step, with commands for each platform: Claude Code subagents: how to create one, call it and keep context clean

Questions about ai-agent-audit-specialist

How to install ai-agent-audit-specialist in Claude Code?

Run npx claude-code-templates@latest --agent security/ai-agent-audit-specialist. It places the template at .claude/agents/ai-agent-audit-specialist.md.

What does ai-agent-audit-specialist do?

It drafts audit architectures, hook capture specifications, and integrity-check scripts for AI coding agents in regulated enterprises.

Which tamper-evidence mechanisms does it specify?

It designs systems around SHA-256 line chaining, OS-level append-only flags (chattr +a, chflags uappnd), detached ed25519 signatures, and SIEM streaming.

Similar subagents

All subagents for Security →
code-reviewer official Anthropic This subagent checks code changes for bugs, security issues, and project-rule violations. Use it when a review should focus on findings that matter. 31,050installs security-auditor official Anthropic This subagent searches code for security flaws and gives engineers concrete fixes. Use it to review a project before hardening or modernization work. 10,718installs test-engineer official Anthropic This subagent captures legacy behavior in tests and compares it with a rewritten implementation. Use it before changing existing modules. 9,715installs code-reviewer VoltAgent Community Reviews code changes for bugs, security flaws and maintenance issues. Use it before merging complex work or auditing a project. 31,050installs security-auditor VoltAgent Community Audits security controls, vulnerabilities, risks, and compliance gaps across systems, infrastructure, and processes. Use it when you need documented findings. 10,718installs devops-engineer VoltAgent Community This subagent reviews infrastructure and helps with CI/CD, containers, and deployment workflows. Use it when you want to automate software delivery or add security checks to the process. 7,392installs

From the same set804

The whole set →
pubmed-database A Claude skill for PubMed access over the E-utilities REST API: MeSH queries, batch fetches, citation matching by PMID or DOI. 149installs linkedin-profile-optimizer Restructures LinkedIn profile sections to target recruiter search queries. Adjusts headlines, summaries, and career history to highlight measurable results. 149installs prompt-library Find prompt patterns for code review, debugging, tests, analysis, and more. Use the skill when you need a starting point for a request or want to shape the response format. 149installs svelte-optimize A performance command for Claude Code that inspects Svelte and SvelteKit apps. It guides bundle reduction and component rendering optimization. 149installs prompt-engineering-dspy Learn to structure language-model tasks with DSPy, assemble RAG workflows, and tune modules from examples. Useful when a project needs more than a hand-written prompt. 147installs system-dynamics-modeler Models complex system dynamics using feedback loops, delay structures, and emergent behavior analysis. Useful for mapping business ecosystems and organizational changes. 147installs typescript-pro Get help with advanced TypeScript types, generic constraints, and strict compiler settings. Use it when shaping shared contracts or diagnosing difficult type inference. 146installs timeline-compressor Compresses a real-world timeline into fast simulation cycles so you can test decisions and risks sooner. Useful before you commit to a plan. 146installs

Project sponsors

Companies that keep this analytics open
Gold sponsor
Nutra.Club

Impressions, clicks and code copies — open statistics. We keep the numbers public for the same reason NeBlask itself is public. Become a sponsor