compliance-auditor

Scan codebases for compliance findings mapped to SOC2, HIPAA, GDPR, and PCI-DSS.

7|2|Updated Nov 9, 2025
One-click install
npx skills add https://github.com/Prompt-or-Die-Labs/hyper-forge --skill compliance-auditor-prompt-or-die-labs
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: compliance-auditor
Source: https://github.com/Prompt-or-Die-Labs/hyper-forge/tree/main/.claude/skills/compliance-auditor
Command: npx skills add https://github.com/Prompt-or-Die-Labs/hyper-forge --skill compliance-auditor-prompt-or-die-labs

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Compliance teams struggle to continuously verify that systems meet SOC2, HIPAA, GDPR, and PCI-DSS requirements without slowing engineering or missing critical control gaps.

Core Features & Use Cases

  • Framework-focused auditing: Maps checks to SOC2 Trust Services Criteria, HIPAA safeguards, GDPR data protection obligations, and PCI-DSS control areas.
  • Automated scan coverage: Detects common issues such as hardcoded secrets, missing encryption at rest, insufficient audit logging, and PHI exposure in logs.
  • Evidence-oriented outputs: Produces structured findings with severity and control/requirement references that support reporting and audit preparation.
  • Control blueprinting: Provides sample Infrastructure-as-Code style compliance control configurations for access control, encryption, and monitoring.

Quick Start

Run a compliance scan against your codebase by asking the AI to “audit this repository for SOC2 and HIPAA issues and return the top findings with severities, mapped control references, and recommended remediation.”

Frequently Asked Questions about compliance-auditor

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I check my codebase for GDPR and HIPAA compliance issues?

To check your codebase for GDPR and HIPAA compliance issues, you can scan application code to detect PHI exposure in logs and verify data protection safeguards. This generates structured findings mapped to specific regulatory control requirements.

How do I automate SOC2 audit evidence collection from my application code?

Automate SOC2 audit evidence collection by scanning application codebases for security controls like encryption and audit logging. The process produces structured findings with severity levels and direct references to SOC2 Trust Services Criteria for reporting.

What is the best way to find hardcoded secrets and missing encryption for PCI-DSS readiness?

The best way to find hardcoded secrets and missing encryption for PCI-DSS readiness is to scan your codebase for common security gaps. This maps detected vulnerabilities directly to PCI-DSS control areas and provides recommended remediation steps.

Can I generate Infrastructure-as-Code compliance controls for SOC2 monitoring?

Yes, you can generate Infrastructure-as-Code compliance controls for SOC2 monitoring. The process provides sample control configurations for access control, encryption, and monitoring to help blueprint your regulatory security architecture.

Does continuous compliance auditing work without slowing down engineering workflows?

Continuous compliance auditing works by scanning codebases to verify systems meet SOC2, HIPAA, GDPR, and PCI-DSS requirements. It automates control validation and evidence generation to identify critical gaps without manual review bottlenecks.