localskills.sh maintains audit logs at both user and organization level to provide visibility into all platform activity.
Organization audit log
The organization log lives under Organization > Audit Log and requires a
role with the audit log read permission (built into owner and admin). It
aggregates all member activity: skill and folder changes, invitations, role and
team changes, SSO and SCIM events, GitHub Sync, and OIDC token exchanges.
Entries are filterable by action type.
Your account scope
The same page has a Your account scope, visible to every member, showing your own account’s activity: skill publishes, token management, profile updates, and CLI logins.
Events tracked
| Event | Description |
|---|---|
skill.created |
New skill published (web, CLI, or MCP) |
skill.updated |
Skill settings changed |
skill.version_created |
New version pushed (web, CLI, or MCP) |
skill.version_imported |
New version imported from a GitHub push |
skill.created_via_import |
New skill created from a GitHub push (new repo directory) |
skill.deleted |
Skill deleted |
skill.version_reverted |
Version rollback |
folder.created |
Folder created |
folder.updated |
Folder renamed or moved |
folder.deleted |
Folder deleted |
folder.acl_updated |
Folder restriction or access grants changed |
personal_workspace.provisioning_scheduled |
Member workspace provisioning scheduled |
personal_workspace.provisioned |
Member workspace provisioned |
personal_workspace.enabled |
Personal Workspaces enabled |
personal_workspace.disabled |
Personal Workspaces disabled |
personal_workspace.backfill_scheduled |
Existing-member backfill scheduled |
personal_workspace.retry_scheduled |
Failed provisioning retry scheduled |
personal_workspace.namespace_updated |
Managed namespace renamed or moved |
personal_workspace.repaired |
Managed workspace access repaired |
mcp_server.created |
MCP server registered |
mcp_server.imported |
MCP server imported from the localskills catalog |
mcp_server.catalog_updated |
Unedited catalog import auto-updated to a new catalog definition |
mcp_server.updated |
MCP server configuration changed |
mcp_server.deleted |
MCP server removed |
user.token_created |
API token created |
user.token_deleted |
API token revoked |
user.profile_updated |
Profile changes |
user.cli_login |
CLI device code login |
user.anonymous_registered |
Anonymous CLI credential registered |
mfa.enabled |
Two-factor authentication enabled |
mfa.disabled |
Two-factor authentication disabled |
mfa.passkey_added |
Passkey registered |
mfa.passkey_removed |
Passkey removed |
mfa.org_requirement_updated |
Organization MFA requirement changed |
organization.created |
Organization created |
organization.updated |
Organization settings changed |
organization.avatar_uploaded |
Organization avatar uploaded |
organization.avatar_deleted |
Organization avatar removed |
organization.member_invited |
Member invited to organization |
organization.member_joined |
Member accepted invitation |
organization.auto_join_updated |
Domain auto-join enabled or disabled |
organization.auto_join_invitation_created |
Invitation auto-created for a matching email domain |
organization.member_role_updated |
Member role changed |
organization.token_created |
Organization API token created |
organization.token_revoked |
Organization API token revoked |
team.created |
Team created |
team.updated |
Team renamed or roles changed |
team.deleted |
Team deleted |
team.member_added |
Member added to a team |
team.member_removed |
Member removed from a team |
role.created |
Custom role created |
role.updated |
Custom role permissions changed |
role.deleted |
Custom role deleted |
sso.provider_created |
SSO provider configured |
sso.provider_updated |
SSO settings modified |
sso.provider_deleted |
SSO provider removed |
sso.login_success |
Successful SSO login |
sso.user_created |
User provisioned via SSO |
sso.domain_claimed |
Domain verification started |
sso.domain_verified |
Domain ownership verified |
sso.domain_removed |
Domain claim removed |
sso.group_mappings_updated |
SSO group→team mappings changed |
sso.team_sync |
Member’s teams reconciled from IdP groups |
scim.provider_created |
SCIM provisioning enabled |
scim.provider_deleted |
SCIM provisioning disabled |
scim.user_provisioned |
User provisioned via SCIM |
scim.user_updated |
User updated via SCIM |
scim.user_deprovisioned |
User removed via SCIM |
oidc.policy_created |
OIDC trust policy created |
oidc.policy_updated |
OIDC trust policy updated |
oidc.policy_deleted |
OIDC trust policy deleted |
oidc.token_exchanged |
CI token exchanged via OIDC |
github_sync.connect |
GitHub repo sync connected |
github_sync.disconnect |
GitHub repo sync disconnected |
github_sync.manual_sync |
Manual GitHub sync triggered |
Retention
Audit log entries are retained for 90 days and auto-purged after that period. Logs are paginated and filterable by action type.