prowler-compliance-review

Validates pull requests for compliance framework changes, including JSON integrity and check existence.

1|Updated Aug 16, 2025
One-click install
npx skills add https://github.com/professor-moody/cloud-tools --skill prowler-compliance-review-professor-moody
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: prowler-compliance-review
Source: https://github.com/professor-moody/cloud-tools/tree/main/repos/prowler/skills/prowler-compliance-review
Command: npx skills add https://github.com/professor-moody/cloud-tools --skill prowler-compliance-review-professor-moody

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) and assets (resource) components.

What problem does it solve?

This Skill automates the review process for pull requests that introduce or modify compliance frameworks, ensuring adherence to standards and best practices before merging.

Core Features & Use Cases

  • Automated Validation: Checks JSON syntax, completeness of checks, and uniqueness of IDs within new or modified compliance frameworks.
  • Standard Adherence: Ensures compliance frameworks align with established patterns for dashboard files and CHANGELOG entries.
  • Use Case: When a developer submits a PR to add a new CIS benchmark for Azure, this Skill will automatically validate the framework's structure and content, flagging any issues for the reviewer.

Quick Start

Use the prowler-compliance-review skill to validate the compliance framework located at prowler/compliance/aws/cis_1.0.json.

Frequently Asked Questions about prowler-compliance-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I validate compliance framework JSON files in a pull request?

You validate compliance framework JSON files in a pull request by running automated checks for JSON syntax, check completeness, and unique IDs using Python 3 validation scripts.

Does prowler-compliance-review support CIS, NIST, and PCI-DSS benchmarks?

Yes, prowler-compliance-review supports validating cloud security benchmarks for CIS, NIST, and PCI-DSS frameworks during the pull request review process.

What is the best way to automate security compliance checks for PR modifications?

Automating security compliance checks for PR modifications is done using a validation skill that ensures JSON integrity, uniqueness of IDs, and adherence to dashboard file and CHANGELOG standards.

Do I need Python 3 to run compliance framework validation scripts?

Yes, you need Python 3 and specific validation scripts to perform compliance framework validation checks against the codebase and framework structure.

Why does my compliance framework pull request fail validation?

Your compliance framework pull request fails validation if the JSON has syntax errors, missing checks, duplicate IDs, or lacks required dashboard files and CHANGELOG entries.