Run SOC 2 gap analysis on AWS and generate remediation reports.
npx skills add https://github.com/kkmookhey/shasta --skill gap-analysis-kkmookhey
Please help me install this Agent Skill. Skill: gap-analysis Source: https://github.com/kkmookhey/shasta/tree/main/.claude/skills/gap-analysis Command: npx skills add https://github.com/kkmookhey/shasta --skill gap-analysis-kkmookhey
SOC 2 readiness is hard and manual, leaving organizations exposed to gaps in controls; this skill runs a comprehensive SOC 2 gap analysis against your AWS environment and surfaces actionable remediation guidance to close those gaps.
Ask Shasta to run a SOC 2 gap analysis against your connected AWS account and review the remediation guidance in the generated report.
High-intent search queries and answers about installing and using this skill.
To run a SOC 2 gap analysis on your AWS account, connect your environment and trigger an assessment. The tool reads configuration files, uses existing scans or runs fresh ones, and generates a report grouped by SOC 2 control with remediation steps.
SOC 2 gap analysis evaluates your AWS environment against SOC 2 controls to identify security and compliance shortfalls. It works by scanning account configurations, mapping findings to specific SOC 2 controls, and outputting actionable remediation guidance for auditors.
You can generate an audit-ready report for SOC 2 compliance by running a gap analysis that outputs Markdown or HTML formats. The report groups findings by SOC 2 control, explains auditor expectations, and provides concrete remediation steps for stakeholders.
Yes, you can reuse existing AWS scan data for SOC 2 gap analysis. The tool automatically checks for recent scan data and uses it when available, but it also supports re-running a fresh analysis if no recent data exists in your environment.
Yes, SOC 2 gap analysis provides specific remediation guidance for AWS. It evaluates your account against SOC 2 controls and presents results grouped by control, offering explicit, actionable remediation steps to close identified security gaps.
kkmookheyValidate AWS credentials and inventory active services across accounts and regions.
pluginagentmarketplaceGenerate security assessment reports from structured findings in Markdown, HTML, PDF, or DOCX.
devkeniScan Docker images, audit Kubernetes clusters, and monitor container runtimes for security weaknesses.
brivaroCreate and manage Prowler compliance frameworks for AWS, Azure, and GCP.
