compliance-audit

Audit codebases against compliance frameworks and generate line-referenced markdown reports.

2|Updated Feb 17, 2026

Search Tags:#automation #security #codebase #audit #compliance #standards #privacy

Ready to run

npx skills add https://github.com/mostafa-drz/claude-skills --skill compliance-audit-mostafa-drz

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: compliance-audit
Source: https://github.com/mostafa-drz/claude-skills/tree/main/code/compliance-audit
Command: npx skills add https://github.com/mostafa-drz/claude-skills --skill compliance-audit-mostafa-drz

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Audits codebases against compliance frameworks to identify violations before an audit, producing a detailed markdown report with line-level code references.

Core Features & Use Cases

Parallel per-directory audits to scale across monorepos and multi-repos.
Generates a structured report with actionable findings and remediation suggestions.
Fetches latest controls for the specified standard from authoritative sources and maps findings to code references.

Quick Start

Run the compliance-audit tool against a target directory and a specified standard to generate a reusable report.

Frequently Asked Questions about compliance-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I automate codebase compliance checks for a monorepo?▼

Automate codebase compliance checks by scanning each top-level directory in parallel to identify violations against current standards. This process collects evidence across monorepos or multi-repo layouts and produces a detailed, line-referenced markdown report.

What is a codebase compliance audit and how does it map findings to code?▼

A codebase compliance audit fetches current controls for a specified standard from authoritative sources and maps identified violations to concrete file:line references. It generates a structured markdown report with actionable findings and specific remediation guidance.

Can I audit a multi-repo layout against up-to-date compliance frameworks?▼

Yes, you can audit a multi-repo layout by scanning each top-level unit in parallel against up-to-date compliance frameworks. The tool scales across single repositories, monorepos, and multi-repo layouts to collect evidence and identify violations.

How do I generate a compliance report with line-level code references?▼

Generate a compliance report by running the audit tool against a target directory and a specified standard. The output is a structured markdown report featuring line-level code references, actionable findings, and detailed remediation suggestions.

Does the compliance audit fetch current controls from authoritative sources?▼

Yes, the compliance audit fetches the latest controls for the specified standard directly from authoritative sources. It then maps the retrieved compliance requirements to concrete file:line references within your codebase to ensure accurate violation tracking.

What is the best way to identify privacy and security standard violations before an audit?▼

The best way to identify privacy and security standard violations is to run an automated codebase audit against the specified compliance frameworks. This detects violations early and outputs a detailed markdown report with line-referenced evidence and remediation steps.