Automate HIPAA/NIST 800-53 control interviews and record evidence to SQLite.
npx skills add https://github.com/aanishs/em-dash --skill comply-assess
Please help me install this Agent Skill. Skill: comply-assess Source: https://github.com/aanishs/em-dash/tree/main/skills/comply-assess Command: npx skills add https://github.com/aanishs/em-dash --skill comply-assess
Organizes and orchestrates HIPAA/NIST 800-53 control interviews, converting complex compliance requirements into a repeatable, evidence-driven workflow.
Start the comply-assess interview workflow and begin assessing controls one at a time using the built-in prompts.
High-intent search queries and answers about installing and using this skill.
NIST 800-53 control interviews for HIPAA compliance are conducted using a guided, one-control-at-a-time workflow that dynamically generates questions from the official NIST assessment method and records evidence directly to a local SQLite database.
Yes, you can collect evidence for vendor risk management controls like SA-9. The workflow applies to a broad set of interview-only NIST 800-53 controls, including vendor risk, risk assessment (RA-3), and training (AT-2) controls.
Yes, you need a local comply-db store built on SQLite to save HIPAA assessment evidence. The environment also requires Bash to execute the interview workflow and manage the evidence recording process.
The best way to track progress across HIPAA compliance interviews is using a guided workflow that processes one control at a time, recording responses in SQLite and providing progress tracking for easy handoff to audit packets.
Compliance interview questions are dynamically derived from the official NIST assessment method for each specific control. They are delivered sequentially via user prompts to ensure accurate, step-by-step evidence collection.
A limitation is that this guided HIPAA evidence collection workflow only applies to interview-only NIST 800-53 controls. It requires Bash and a local SQLite database, meaning controls requiring technical testing or automated scanning are not covered.
aanishsAutomate HIPAA and NIST-800-53 control scanning, fixes, and evidence collection.
aanishsInitialize GDPR compliance controls and route tasks through comply-* workflows.
thejordanleopoldAutomate compliance program management and evidence collection across SOC 2, ISO 27001, and GDPR.
ethanolivertroyAnalyze Istio, Consul, and Linkerd service mesh configurations for NIST 800-53 security vulnerabilities.
