repo-compliance

What problem does it solve?

Manually auditing repositories against compliance standards is time-consuming, inconsistent, and difficult to scale across multiple projects or organizations. This Skill eliminates that overhead by automating the full audit, remediation, and reporting workflow for any GitHub repository.

Core Features & Use Cases

• Interactive Audit Flow: Run a full audit of a single repository, review findings sorted by severity, approve remediations, and auto-generate a pull request with all fixes applied.
• Scheduled Org-Wide Sweeps: Run report-only compliance sweeps across all repositories in your organization on a cron schedule, with aggregated findings and retrospective tracking.
• Domain-Specific Auditing: Leverage specialized agents for foundations, CI/CD, Python toolchain, pre-commit, OSSF, API, and documentation compliance, with pre-fetched catalog data to skip redundant GitHub API calls.
• Use Case: A platform engineering team managing 40+ repositories can use this Skill to run a weekly scheduled sweep, identify critical compliance gaps like unpinned action refs or missing security policies, and auto-generate remediation PRs for approved issues.

Quick Start

Invoke the repo-compliance skill to run an interactive compliance audit of your current repository, review prioritized findings by severity, and apply approved remediations via an automated pull request.