Compliance Checker Skill

Overview

Checks compliance with SOC 2, GDPR, HIPAA, and PCI-DSS standards by analyzing code, configuration, and infrastructure for regulatory requirements.

Capabilities

• SOC 2 compliance checking
• GDPR requirement validation
• HIPAA compliance assessment
• PCI-DSS validation
• Custom compliance framework support
• Evidence collection
• Gap analysis reporting
• Remediation guidance

Target Processes

• security-architecture-review
• iac-review
• data-architecture-design

Input Schema

{
  "type": "object",
  "required": ["frameworks", "targets"],
  "properties": {
    "frameworks": {
      "type": "array",
      "items": {
        "type": "string",
        "enum": ["soc2", "gdpr", "hipaa", "pci-dss", "iso27001", "nist"]
      }
    },
    "targets": {
      "type": "object",
      "properties": {
        "code": { "type": "array" },
        "infrastructure": { "type": "array" },
        "documentation": { "type": "array" }
      }
    },
    "options": {
      "type": "object",
      "properties": {
        "scope": {
          "type": "array",
          "description": "Specific controls to check"
        },
        "collectEvidence": {
          "type": "boolean",
          "default": true
        },
        "outputFormat": {
          "type": "string",
          "enum": ["json", "markdown", "pdf"],
          "default": "markdown"
        }
      }
    }
  }
}

Output Schema

{
  "type": "object",
  "properties": {
    "frameworks": {
      "type": "array",
      "items": {
        "type": "object",
        "properties": {
          "name": { "type": "string" },
          "complianceScore": { "type": "number" },
          "controls": {
            "type": "array",
            "items": {
              "type": "object",
              "properties": {
                "id": { "type": "string" },
                "name": { "type": "string" },
                "status": { "type": "string" },
                "findings": { "type": "array" },
                "evidence": { "type": "array" }
              }
            }
          }
        }
      }
    },
    "gaps": {
      "type": "array",
      "items": {
        "type": "object",
        "properties": {
          "control": { "type": "string" },
          "gap": { "type": "string" },
          "remediation": { "type": "string" },
          "priority": { "type": "string" }
        }
      }
    },
    "summary": {
      "type": "object",
      "properties": {
        "overallScore": { "type": "number" },
        "passedControls": { "type": "number" },
        "failedControls": { "type": "number" },
        "notApplicable": { "type": "number" }
      }
    }
  }
}

Usage Example

{
  kind: 'skill',
  skill: {
    name: 'compliance-checker',
    context: {
      frameworks: ['soc2', 'gdpr'],
      targets: {
        code: ['src/**/*.ts'],
        infrastructure: ['terraform/**/*.tf'],
        documentation: ['docs/security/**/*.md']
      },
      options: {
        collectEvidence: true,
        outputFormat: 'markdown'
      }
    }
  }
}