Investigate a potentially compromised Datadog API key — timeline of actions, geo/IP breakdown, endpoints called, anomaly flags, and remediation steps.
Install
npx skills add datadog-labs/agent-skills --skill dd-audit-key-compromisenpx skills add datadog-labs/agent-skills --skill dd-audit-key-compromise -a claude-code -gnpx skills add datadog-labs/agent-skills --skill dd-audit-key-compromise -a codex -ggemini skills install https://github.com/datadog-labs/agent-skills.git --path dd-audit/key-compromisegh skill install datadog-labs/agent-skills dd-audit-key-compromisegit clone --depth 1 https://github.com/datadog-labs/agent-skills /tmp/datadog-labs__agent-skills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/datadog-labs__agent-skills/dd-audit/key-compromise ~/.claude/skills/dd-audit-key-compromise # Claude Code
cp -R /tmp/datadog-labs__agent-skills/dd-audit/key-compromise ~/.agents/skills/dd-audit-key-compromise # Codex, Cursor, Gemini CLI, Copilot, OpenCode