policy-runner

What problem does it solve?

This Skill automates the enforcement of organizational policies (e.g., security, compliance, best practices) within your codebase, eliminating slow, inconsistent, and error-prone manual checks that delay releases and increase risk.

Core Features & Use Cases

• Policy-as-Code Execution: Reads policy_plan.md to discover and execute configured policy checks using tools like OPA or Conftest.
• Automated Reporting: Captures raw policy runner output and generates a concise policy_runner_summary.md detailing checks run, passed, failed, and policies that are planned but not auto-executed.
• SDLC Integration: Designed for seamless use in the "Plan" and "Gate" phases to ensure policy adherence throughout the development lifecycle.
• Use Case: Before deploying a new feature, automatically run security and compliance policies defined in your policy_plan.md to ensure no critical violations are introduced, providing an immediate verdict on policy adherence.

Quick Start

Execute the policy-runner skill to evaluate all configured policies based on the 'policy_plan.md' file, summarizing the results in 'policy_runner_summary.md'.