What problem does it solve? Regulatory compliance audits require manually checking codebases and processes against dozens of framework requirements, which is slow, error-prone, and hard to document for certification. This Skill automates the scan, gap analysis, and report generation so teams can identify compliance gaps before an auditor does. ## Core Features & Use Cases - Multi-Framework Auditing: Assesses systems against GDPR, HIPAA, SOC 2, CCPA, and PCI-DSS with framework-specific requirement tables and applicability determination. - Seven-Category Scanning: Systematically checks PII handling, data retention, encryption, access controls, audit logging, consent management, and data transfer using defined search patterns. - Structured Compliance Reports: Generates a compliance-report.md with severity-rated findings, per-framework gap analyses, remediation plans, and evidence packs for certification. - Use Case: Before a SOC 2 audit, run this Skill against your repository to find missing audit logging, weak encryption configurations, and hardcoded secrets, then receive a prioritized remediation plan with effort estimates. ## Quick Start Audit this codebase for GDPR and SOC 2 compliance and generate a compliance report with remediation steps.
