Agent Skills by rifh2000
Showing 46 vetted skills indexed across 1 GitHub repositories.
rifh2000aws-inspector-expert
Translate AWS Inspector findings into SCF-mapped compliance language for audits.
rifh2000github-inspector-expert
Map GitHub configuration checks to SCF controls for compliance insights.
rifh2000gcp-inspector-expert
Translate raw GCP configuration data into SCF-aligned compliance insights.
rifh2000okta-inspector-expert
Evaluate Okta configurations against SOC 2, NIST, FedRAMP, and PCI frameworks.
rifh2000code-to-control-mapper
Map Terraform, Kubernetes, and CloudFormation files to compliance controls.
rifh2000evidence-artifact-collector
Collects point-in-time evidence from AWS, Azure, and GCP into JSON, Markdown, or CSV reports.
rifh2000audit-ready-pr-reviewer
Audit pull request diffs for SOC 2, ISO 27001, and NIST 800-53 compliance regressions.
rifh2000policy-as-code-generator
Translate natural-language compliance requirements into OPA Rego, AWS Config Rules, Sentinel, and Terraform policies.
rifh2000risk-to-jira-transformer
Transform unstructured risk assessments into structured Jira API payloads.
rifh2000tprm-scorer
Calculate vendor risk scores from inherent and residual risk factors.
rifh2000vendor-assessor
Automate vendor risk assessments with standardized questionnaires and risk scoring.
rifh2000questionnaire-analyzer
Identify red flags, gaps, and follow-up needs in vendor security questionnaires.
rifh2000oscal-expert
Guide OSCAL document authoring, validation, and conversion across seven document types.
rifh2000risk-register-manager
Maintain a structured risk register with JSON/YAML contracts and scoring.
rifh2000compliance-tracker
Identify framework compliance gaps and generate remediation plans across SOC 2, ISO 27001, NIST, PCI, and HIPAA.
rifh2000policy-lifecycle
Automate policy creation, gap analysis, versioning, reviews, and approvals.
rifh2000ccm-expert
Map CCM v4.0 controls to multi-cloud contexts and deliver a remediation roadmap.
rifh2000stateramp-expert
Identify and implement StateRAMP authorization activities for state and local government cloud services.
rifh2000glba-expert
Guide financial institutions in implementing GLBA Safeguards Rule requirements.
rifh2000fedramp-rev5-expert
Guide FedRAMP Rev 5 authorization with documentation and NIST SP 800-53 control mappings.
rifh2000pbmm-expert
Analyze cloud deployments for PBMM compliance with ITSG-33 and CCCS requirements.
rifh2000dora-expert
Navigate EU DORA regulatory requirements for financial entities.
rifh2000singapore-pdpa-expert
Determine PDPA 2012 scope and applicability for Singapore data processing operations.
rifh2000iso-expert
Guide ISO 27001 ISMS certification with Annex A mapping and risk assessment.