gaps

Track open gaps in regulatory, risk, and remediation workflows.

Updated May 28, 2026
One-click install
npx skills add https://github.com/gtgspot/clegal --skill gaps-gtgspot
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: gaps
Source: https://github.com/gtgspot/clegal/tree/main/regulatory-legal/skills/gaps
Command: npx skills add https://github.com/gtgspot/clegal --skill gaps-gtgspot

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Open gaps tracker — what's flagged and not yet closed. This skill helps teams identify and manage unresolved gaps in regulatory, compliance, or remediation workflows, ensuring visibility and timely closure.

Core Features & Use Cases

  • List open gaps by age and materiality to prioritize remediation efforts.
  • Close gaps with a resolution note using --close GAP-ID to mark them as resolved.
  • Record risk-acceptance rationale and acceptor, updating status to risk-accepted when a gap is considered mitigated.
  • Leverage the gap-surfacer reference skill for deeper remediation actions and notifications.

Quick Start

Query the gap tracker to list all open gaps by age and materiality.

Frequently Asked Questions about gaps

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I track open compliance gaps for audit reporting?▼

Track open compliance gaps for audit reporting by listing unresolved regulatory and risk items by age and materiality. The gap tracker reads the gap-tracker.yaml configuration to coordinate status reporting, owner-notification, and escalation cues for audit planning.

How do I close a remediation gap with a resolution note?▼

Close a remediation gap by using the --close GAP-ID command to mark it as resolved. You must provide a resolution note to document the remediation action taken to close the identified gap.

Can I accept open risk gaps instead of closing them for audit purposes?▼

Yes, you can accept open risk gaps instead of closing them by recording a risk-acceptance rationale and the acceptor. This updates the gap status to risk-accepted, formally documenting the risk justification for audit and governance pipelines.

What is the best way to prioritize remediation efforts for regulatory findings?▼

The best way to prioritize remediation efforts is to list open regulatory gaps by age and materiality. This allows teams to identify high-priority unresolved findings and drive timely closure within governance workflows.

Do I need a specific configuration file to identify unresolved risk findings?▼

Yes, you need a gap-tracker.yaml configuration file to identify unresolved risk findings. The skill reads this configuration to surface open gaps, coordinate status reporting, and trigger owner-notification and escalation cues.

How does risk acceptance work in compliance gap management?▼

Risk acceptance in compliance gap management works by recording a risk justification and the acceptor, which updates the gap status to risk-accepted. This mitigates the gap formally within the governance pipeline instead of closing it with a resolution note.