soc2

Initialize SOC 2 controls and track compliance status with comply-db.

10|5|Updated Mar 22, 2026
One-click install
npx skills add https://github.com/aanishs/em-dash --skill soc2-aanishs
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: soc2
Source: https://github.com/aanishs/em-dash/tree/main/skills/soc2
Command: npx skills add https://github.com/aanishs/em-dash --skill soc2-aanishs

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

SOC 2 readiness can be tedious and error-prone; this Skill automates initialization of SOC 2 controls, status tracking, and routing to automated and guided activities to streamline compliance.

Core Features & Use Cases

  • Initialize SOC 2 framework and import controls via comply-db.
  • Show ongoing status and progress, with a guided workflow across comply-auto, comply-scan, comply-assess, comply-fix, and comply-report.
  • Evidence lives in SQLite: ~/.em-dash/projects/{slug}/compliance.db for audit packets and control evidence.
  • Use Case: Your team starts with SOC 2 scope, runs automated checks, interviews where needed, remediates gaps, and generates a signed report.

Quick Start

Initialize SOC 2 compliance and show your status, then progress through the guided steps to automate checks and generate a final audit packet.

Frequently Asked Questions about soc2

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate SOC 2 readiness and compliance tracking?

Automate SOC 2 readiness by initializing controls via comply-db and tracking status through a guided workflow using /comply-auto, /comply-scan, /comply-assess, /comply-fix, and /comply-report commands to streamline compliance.

What is the best way to generate a SOC 2 audit report with evidence?

Generate a SOC 2 audit report by progressing through the guided remediation workflow and executing the /comply-report command, which compiles stored control evidence into a final signed audit packet.

Does SOC 2 compliance automation require a specific database environment?

Yes, SOC 2 compliance automation requires the em-dash environment with comply-db tooling, storing all control evidence and audit packets locally in an SQLite database located at ~/.em-dash/projects/{slug}/compliance.db.

How doesSOC 2 compliance initialization work for organizations?

SOC 2 compliance initialization works by importing the framework and defining controls through comply-db, establishing a baseline scope for your organization before routing to automated checks and guided interviews.

Can I run automated security scans and interviews for SOC 2 controls?

Yes, you can run automated security scans and guided interviews for SOC 2 controls by using the /comply-scan command for automated checks and /comply-assess to conduct interviews where needed.

How do I remediate SOC 2 control gaps found during an audit?

Remediate SOC 2 control gaps by using the /comply-fix command after completing automated scans and assessments, allowing your team to address identified vulnerabilities before generating the final report.