Missing audit logging
MediumAV-AUDIT-001Audit & loggingCore pack
What it finds
Absence of `audit`, `logger.*`, `winston`, `pino`, or structured-log patterns alongside real execution behavior.
Why it matters
Without an audit trail, forensic investigation after a failure or breach is impossible.
How to fix it
Add structured audit logging (timestamp, action, user, result) to every execution.
Pro shows the corrected code for your exact file, step by step, and re-scans to confirm the fix. See plans
Check details
- Finding code
- MISSING_AUDIT_LOGGING
- How it detects
- Looks for a risky pattern, and stays quiet when a matching safeguard is present.
- Confidence
- Likely: strong signal, but review it in context.
- Scans
- Agent source with detectable execution behavior
Check your agent for this
Paste your agent code or MCP config. The free scan runs all 124 checks in about 10 seconds — no account needed.