compliance-auditor

What problem does it solve?

This Skill automates compliance auditing and continuous monitoring for regulatory frameworks like SOC2, HIPAA, GDPR, and PCI-DSS. It helps organizations maintain compliance, prepare for external audits, and reduce the manual effort involved in security and regulatory checks.

Core Features & Use Cases

• Automated Scans: Detects hardcoded secrets, verifies encryption, and checks audit logging against compliance controls.
• Framework-Specific Checks: Provides tailored checks for SOC2, HIPAA (PHI exposure), GDPR (PII protection), and PCI-DSS.
• Compliance Reporting: Generates reports detailing findings, severity, and control violations.
• Use Case: To prepare for an upcoming SOC2 audit, use this skill to "run a SOC2 compliance scan" on your codebase. It will identify critical issues like hardcoded credentials or insufficient audit logging, providing actionable findings.

Quick Start

Run a SOC2 compliance scan on the current codebase and generate a report.