compliance-auditor

What problem does it solve?

This Skill automates the complex and time-consuming process of compliance auditing for frameworks like SOC2, HIPAA, GDPR, and PCI-DSS. It proactively identifies security vulnerabilities and policy violations, ensuring continuous regulatory adherence and significantly reducing the effort required for external audits.

Core Features & Use Cases

• Automated Compliance Checks: Scans codebase and infrastructure for hardcoded secrets, encryption status, audit logging, and PHI exposure.
• Framework-Specific Audits: Provides tailored checks and reporting for SOC2, HIPAA, GDPR, and PCI-DSS requirements.
• Use Case: Before a SOC2 audit, use this Skill to "run a SOC2 compliance scan." It will automatically check for critical controls like logical access, encryption at rest, and sufficient audit logging, providing a report of findings and helping you remediate issues before the auditors arrive.

Quick Start

Run a SOC2 compliance scan on our codebase and report any findings.