gaps

Track open gaps in regulatory, risk, and remediation workflows.

Updated May 28, 2026
One-click install
npx skills add https://github.com/gtgspot/clegal --skill gaps-gtgspot
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: gaps
Source: https://github.com/gtgspot/clegal/tree/main/regulatory-legal/skills/gaps
Command: npx skills add https://github.com/gtgspot/clegal --skill gaps-gtgspot

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Open gaps tracker — what's flagged and not yet closed. This skill helps teams identify and manage unresolved gaps in regulatory, compliance, or remediation workflows, ensuring visibility and timely closure.

Core Features & Use Cases

  • List open gaps by age and materiality to prioritize remediation efforts.
  • Close gaps with a resolution note using --close GAP-ID to mark them as resolved.
  • Record risk-acceptance rationale and acceptor, updating status to risk-accepted when a gap is considered mitigated.
  • Leverage the gap-surfacer reference skill for deeper remediation actions and notifications.

Quick Start

Query the gap tracker to list all open gaps by age and materiality.

Frequently Asked Questions about gaps

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I track open compliance gaps for audit reporting?

Track open compliance gaps for audit reporting by listing unresolved regulatory and risk items by age and materiality. The gap tracker reads the gap-tracker.yaml configuration to coordinate status reporting, owner-notification, and escalation cues for audit planning.

How do I close a remediation gap with a resolution note?

Close a remediation gap by using the --close GAP-ID command to mark it as resolved. You must provide a resolution note to document the remediation action taken to close the identified gap.

Can I accept open risk gaps instead of closing them for audit purposes?

Yes, you can accept open risk gaps instead of closing them by recording a risk-acceptance rationale and the acceptor. This updates the gap status to risk-accepted, formally documenting the risk justification for audit and governance pipelines.

What is the best way to prioritize remediation efforts for regulatory findings?

The best way to prioritize remediation efforts is to list open regulatory gaps by age and materiality. This allows teams to identify high-priority unresolved findings and drive timely closure within governance workflows.

Do I need a specific configuration file to identify unresolved risk findings?

Yes, you need a gap-tracker.yaml configuration file to identify unresolved risk findings. The skill reads this configuration to surface open gaps, coordinate status reporting, and trigger owner-notification and escalation cues.

How does risk acceptance work in compliance gap management?

Risk acceptance in compliance gap management works by recording a risk justification and the acceptor, which updates the gap status to risk-accepted. This mitigates the gap formally within the governance pipeline instead of closing it with a resolution note.