What problem does it solve? AI and LLM applications face a growing patchwork of regulations (EU AI Act, GDPR, NIST AI RMF, Colorado AI Act, HIPAA, ISO 42001), and engineering teams struggle to know whether their codebase meets technical compliance requirements. This Skill scans a codebase for compliance gaps, cross-references Arize tracing instrumentation for audit-trail coverage, and produces a prioritized remediation checklist. ## Core Features & Use Cases - Framework-tailored audits: Asks the user which frameworks apply (EU, US, ISO 42001) and the use case category, then classifies risk tier before scanning. - Seven-domain codebase scan: Inspects transparency, data protection, security, testing, documentation, monitoring, and vendor management, quoting exact file paths and code snippets for every gap. - Instrumentation cross-reference: Verifies Arize/OpenTelemetry tracing captures the audit trails regulators require (user IDs, PII redaction, error spans, retention). - Use Case: A team shipping an LLM chatbot in the EU runs the audit, learns their traces leak unredacted PII and no AI disclosure exists in the UI, and receives a prioritized checklist with concrete fixes. ## Quick Start Ask the assistant to audit this AI application for EU AI Act and GDPR compliance and produce a remediation checklist.
