parsing-framework-documents

Parses compliance framework documents into normalized requirements with automation-feasibility classification and confidence scores.

1|Updated Jun 11, 2026
One-click install
npx skills add https://github.com/fianulabs/fianu-skills --skill parsing-framework-documents-fianulabs
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: parsing-framework-documents
Source: https://github.com/fianulabs/fianu-skills/tree/main/skills/parsing-framework-documents
Command: npx skills add https://github.com/fianulabs/fianu-skills --skill parsing-framework-documents-fianulabs

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Compliance frameworks like SOC 2 and NIST 800-53 arrive as spreadsheets, CSVs, or PDFs with inconsistent column names and layouts, making it hard to turn raw requirement rows into structured data that downstream control-design workflows can consume. ## Core Features & Use Cases - Multi-format ingestion: Reads Excel (.xlsx), CSV, and structured text/PDF documents, mapping varied column headers (ID, Title, Description, Category, Evidence) to a normalized schema. - Keyword extraction: Strips stopwords and retains technical and compliance-domain terms, producing 5-10 keywords per requirement for matching against existing controls. - Automation classification: Labels each requirement as automated-evidence, manual-attestation, hybrid, or informational, with a confidence score that gates downstream action (proceed, confirm, or flag for review). - Use Case: Ingest a SOC 2 spreadsheet, normalize every row into structured JSON with keywords, and classify each requirement so the converting-frameworks-to-controls workflow knows which controls to design automatically and which need human attestation. ## Quick Start Parse the attached SOC 2 framework spreadsheet and classify each requirement by automation feasibility with confidence scores.

Frequently Asked Questions about parsing-framework-documents

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I extract requirements from a SOC 2 or NIST compliance spreadsheet?▼

Read rows from the Excel or CSV file using the header row, then map columns semantically (ID, Title, Description, Category, Evidence) since names vary by framework. Each row is normalized into a structured JSON object with keywords and a source reference.

How are compliance requirements classified for automation feasibility?▼

Each requirement is classified as automated-evidence, manual-attestation, hybrid, or informational based on signals like measurable metrics, tool output references, process language, and documentation-only wording. Each classification carries a confidence score that determines whether to proceed or flag for human review.

Can I parse a compliance framework PDF that has no table structure?▼

Yes, narrative PDFs without clear columns are handled through LLM-assisted extraction that identifies requirement boundaries by paragraph or section and extracts fields by context. Low-confidence extractions are flagged in the output for human confirmation.

What happens when a requirement is too vague to classify?▼

Vague requirements are marked as manual-attestation with a confidence score below 0.50 and flagged for human review with a note that they are too vague for automated mapping. They are not passed to downstream control design.

How are overlapping requirements across frameworks handled?▼

When multiple requirements describe the same control, such as NIST AC-2 and SOC 2 CC-6.1, both IDs are noted in the output. Downstream matching groups them under one control with both IDs listed in the mapping report.