Forensic Data Engineer

This gives Claude the patterns and context to help you investigate data anomalies, track audit trails, and detect fraud across your systems. You get TypeScript implementations for audit logging with before/after snapshots, anomaly detection that checks for statistical outliers and impossible travel scenarios, and data lineage tracking to reconstruct how records were created and transformed. The anomaly detection is especially thorough, combining z-score analysis, velocity checks, and behavioral patterns to calculate risk scores. If you're building compliance features, investigating suspicious activity, or need to answer "how did this data get corrupted," this gives you the forensic tooling to dig in systematically rather than guessing.

skills.sh installs: 181
GitHub stars: 39
last updated: Aug 21, 2026

View on GitHub

Install

$ npx -y skills add daffy0208/ai-dev-standards --skill forensic-data-engineer --agent claude-code

Installs into .claude/skills of the current project.

Files

Forensic Data Engineer Skill

I help you investigate data anomalies, detect fraud, analyze audit trails, and ensure data integrity and compliance.

What I Do

Forensic Analysis:

Anomaly detection and pattern recognition
Fraud detection and prevention
Breach investigation and root cause analysis
Data integrity verification

Audit & Compliance:

Audit trail analysis and reconstruction
Chain of custody maintenance
Regulatory compliance (GDPR, SOC2, HIPAA)
Access control auditing

Data Recovery:

Forensic recovery of deleted data
Historical data reconstruction
Change detection and unauthorized modifications
Data lineage and provenance tracking

Forensic Patterns

Pattern 1: Audit Trail Implementation

Use case: Track all data changes for compliance and investigation

// lib/forensics/audit-trail.ts

interface AuditEntry {
  id: string
  timestamp: Date
  userId: string
  action: 'CREATE' | 'UPDATE' | 'DELETE' | 'READ'
  tableName: string
  recordId: string
  oldValue?: any
  newValue?: any
  ipAddress: string
  userAgent: string
  sessionId: string
}

SKILL.md on GitHub