What problem does it solve?
This Skill automates the enforcement of organizational policies (e.g., security, compliance, best practices) within your codebase, eliminating slow, inconsistent, and error-prone manual checks that delay releases and increase risk.
Core Features & Use Cases
- Policy-as-Code Execution: Reads
policy_plan.md to discover and execute configured policy checks using tools like OPA or Conftest.
- Automated Reporting: Captures raw policy runner output and generates a concise
policy_runner_summary.md detailing checks run, passed, failed, and policies that are planned but not auto-executed.
- SDLC Integration: Designed for seamless use in the "Plan" and "Gate" phases to ensure policy adherence throughout the development lifecycle.
- Use Case: Before deploying a new feature, automatically run security and compliance policies defined in your
policy_plan.md to ensure no critical violations are introduced, providing an immediate verdict on policy adherence.
Quick Start
Execute the policy-runner skill to evaluate all configured policies based on the 'policy_plan.md' file, summarizing the results in 'policy_runner_summary.md'.
