prowler-compliance-review

Validate compliance framework JSON syntax, check existence, and verify requirement ID uniqueness in pull requests.

Updated Feb 18, 2026
One-click install
npx skills add https://github.com/vanhoangkha/cloud-security-audit --skill prowler-compliance-review-vanhoangkha
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: prowler-compliance-review
Source: https://github.com/vanhoangkha/cloud-security-audit/tree/main/multi-cloud/prowler/skills/prowler-compliance-review
Command: npx skills add https://github.com/vanhoangkha/cloud-security-audit --skill prowler-compliance-review-vanhoangkha

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes assets (resource) and references (resource) components.

What problem does it solve?

This Skill automates the review of Pull Requests that introduce or modify compliance frameworks, ensuring their integrity and adherence to project standards before merging.

Core Features & Use Cases

  • Automated Validation: Checks JSON syntax, completeness of checks, and uniqueness of requirement IDs.
  • PR Integration: Specifically designed to be triggered during the review of PRs containing compliance framework changes.
  • Use Case: When a developer submits a PR to add a new CIS benchmark for AWS, this Skill will automatically validate the new JSON file, check for missing Prowler checks, and ensure all required metadata is present, flagging any issues for the reviewer.

Quick Start

Use the prowler-compliance-review skill to validate the compliance framework file 'prowler/compliance/aws/cis_1.0_aws.json'.

Frequently Asked Questions about prowler-compliance-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I validate compliance framework JSON files in a pull request?

Checking compliance framework PRs involves validating JSON syntax, ensuring defined Prowler checks exist in the codebase, and verifying requirement ID uniqueness. It supports automated and manual assessment statuses for quality assurance.

Does this PR review skill support both AWS and Azure compliance frameworks?

Yes, it validates compliance framework PRs for both AWS and Azure environments. It ensures new benchmark files have correct JSON syntax, complete Prowler checks, and unique requirement metadata across cloud platforms.

What is the best way to automate CIS benchmark checks in a CI/CD pipeline?

The best way to automate CIS benchmark checks in a CI/CD pipeline is by integrating this skill into PR reviews. It validates JSON syntax, checks for missing Prowler checks, and ensures required metadata is present automatically.

Can I use prowler-compliance-review to check for duplicate requirement IDs?

Yes, you can use prowler-compliance-review to check for duplicate requirement IDs. It explicitly verifies the uniqueness of requirement IDs within compliance framework files submitted via pull requests.

Why does my compliance framework PR fail validation when checks are missing?

Your compliance framework PR fails validation when checks are missing because the skill ensures completeness by verifying that all defined checks actually exist in the codebase before allowing a merge.