skills.rest
josemlopez
josemlopezCOMMUNITY
Explore all skills by this author →
GitHub

tm-compliance

Map threats and controls to compliance frameworks and generate audit-ready reports.

8|1|Updated Jan 20, 2026
Search Tags:#OWASP#audit#compliance#reporting#SOC2#threat-modeling#framework-mapping
One-click install
npx skills add https://github.com/josemlopez/threat-modeling-toolkit --skill tm-compliance
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: tm-compliance
Source: https://github.com/josemlopez/threat-modeling-toolkit/tree/main/skills/tm-compliance
Command: npx skills add https://github.com/josemlopez/threat-modeling-toolkit --skill tm-compliance

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill maps threats and controls to compliance frameworks and generates audit-ready documentation to support audits and reporting.

Core Features & Use Cases

  • Framework mapping: Link threats and controls to OWASP Top 10, SOC2, PCI-DSS, HIPAA, GDPR.
  • Compliance scoring: Calculate coverage percentages and identify gaps.
  • Audit documentation: Produce compliant-ready reports (compliance.json, compliance-report.md) and an evidence trail for governance.
  • Multi-project tracking: Reuse mappings across multiple threat models.

Quick Start

Run the tm-compliance skill to map a threat model to a chosen framework and generate JSON and Markdown reports suitable for audits.

Frequently Asked Questions about tm-compliance

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I map threat models to compliance frameworks like SOC2 and PCI-DSS?▼

To map threat models to compliance frameworks, this skill links identified threats and controls to SOC2, PCI-DSS, HIPAA, and GDPR requirements. It computes coverage percentages and identifies gaps to generate audit-ready documentation.

Can I generate audit-ready documentation for GDPR and HIPAA from a threat model?▼

Yes, you can generate audit-ready documentation for GDPR and HIPAA from a threat model. The skill produces a structured compliance.json file and a human-readable compliance-report.md, along with an evidence trail for governance.

What is the best way to calculate compliance coverage and identify security gaps?▼

The best way to calculate compliance coverage is by applying threat models across OWASP Top 10, SOC2, PCI-DSS, HIPAA, and GDPR. The skill evaluates mapped controls to compute coverage percentages and highlights specific documentation gaps.

Does this threat modeling compliance tool support multi-project tracking?▼

Yes, this threat modeling compliance tool supports multi-project tracking. You can reuse existing threat model mappings across multiple projects to maintain consistent framework coverage and streamline reporting.

What format are the compliance audit reports exported in?▼

Compliance audit reports are exported in two formats: a structured compliance.json file for automated processing and a human-readable compliance-report.md file for stakeholder review and evidence governance.

Related Skills

Explore More Legal & Compliance Skills→
pluginagentmarketplacepluginagentmarketplace
3

vulnerability-discovery

Identify and analyze AI/LLM vulnerabilities via structured threat modeling and attack surface analysis.

Community
Advanced
gonzalezpazmonicagonzalezpazmonica
47

governance-enterprise

Orchestrate enterprise governance workflows for audit trails, compliance, and certifications.

Community
Advanced
robit-manrobit-man

security-assessment

Orchestrate security assessments with STRIDE threat modeling and OWASP Top 10 scanning.

Community
Advanced
aviskaaraviskaar
6

compliance-auditor

Automate regulatory compliance audits and evidence collection across SOC 2, NIST CSF, ISO 27001, HIPAA, and SOX.

Official
Advanced