Audit readiness

Expert SOX IT General Controls (ITGC) advisor for finance, internal audit and IT compliance teams.

Sushegaad/Claude-Skills-Governance-Risk-and-Compliance

Turn an incoming set of findings — from an AI reviewer, a referee report, a code review, a linter, or a second model — into verified fixes, without letting a confident misread damage correct work.

pedrohcgs/claude-code-my-workflow

Produce a mock-audit storyboard — a single HTML page embedding related UX surfaces side-by-side, with per-mock audit checklists, a flow diagram, and gap cards for missing mocks.

citypaul/.dotfiles

Implement and maintain compliance with SOC 2, HIPAA, PCI-DSS, and GDPR using unified control mapping, policy-as-code enforcement, and automated evidence collection.

ancoleman/ai-design-components

SCM (software configuration management) and Git — branching, merges, conflicts, worktrees, baselines, audit readiness, plus Conventional Commits and safe staging.

first-fluke/oh-my-agent

Translate technical security work into the language of non-security audiences — board, executives, engineering, customer success, customers, legal, procurement, sales.

briiirussell/cybersecurity-skills

Characterize what blocks a research target: readiness dimensions, obstacles, bottlenecks, resource gaps, causal constraints, dependencies, conflicts, removability, and mitigation pathways.

yogsoth-ai/de-anthropocentric-research-engine

[omh] Testing an internal control -- SOX, ICFR or ITGC: define the population and the sample, name the evidence that proves each item, re-perform the control, and grade any deficiency from stated…

rlaope/oh-my-hermes

Execute automate SOC 2 audit preparation including evidence gathering, control assessment, and compliance gap identification.

jeremylongshore/tons-of-skills-marketplace

Support SOX 404 compliance with control testing methodology, sample selection, and documentation standards.

evolution-foundation/evo-nexus

Pre-ship audit checklist for Ethereum dApps built with Scaffold-ETH 2.

austintgriffith/ethskills

Verify fix commits address audit findings without new bugs. An agent skill from aiskillstore/marketplace.

aiskillstore/marketplace

ISO 42001 AI Management System (AIMS) audit-prep playbook. An agent skill from borghei/Claude-Skills.

borghei/Claude-Skills

DORA (EU 2022/2554) digital operational resilience compliance for financial entities, covering all 5 pillars.

borghei/Claude-Skills

ISMS auditing for ISO 27001 compliance, control assessment, and certification support.

borghei/Claude-Skills

ISO 13485 internal audit expertise for medical device QMS. An agent skill from borghei/Claude-Skills.

borghei/Claude-Skills

SOC 2 audit-prep playbook: the 4/8/12-week sprint to audit-ready for a Type I or Type II observation.

borghei/Claude-Skills

/cs:aims-audit <scope — ISO/IEC 42001 AIMS internal-audit 6-question forcing interrogation.

alirezarezvani/claude-skills

/cs:iso13485-audit-prep <scope — ISO 13485 QMS audit 6-question forcing interrogation.

alirezarezvani/claude-skills

/cs:iso27001-audit-prep <scope — ISO 27001 ISMS audit readiness 6-question forcing interrogation.

alirezarezvani/claude-skills

Solidity security patterns, common vulnerabilities, and pre-deploy audit checklist.

austintgriffith/ethskills

ISO 42001 AI Management System (AIMS) compliance. An agent skill from borghei/Claude-Skills.

borghei/Claude-Skills

SOC 2 Type I and Type II compliance management against the Trust Services Criteria.

borghei/Claude-Skills

NIS2 Compliance Navigator — scope classification, Art. An agent skill from lawve-ai/awesome-legal-skills.

lawve-ai/awesome-legal-skills

Turn existing audit findings into sprint-ready tickets with T-shirt estimates, acceptance criteria, dependencies and phases.

murphytrueman/design-system-ops

Record a vetted Hex package version in hexvet.exs after a security review — manages the audit ledger, not the scanner.

oliver-kriska/claude-elixir-phoenix

Record a vetted Hex package version in hexvet.exs after a security review — manages the audit ledger, not the scanner.

oliver-kriska/claude-elixir-phoenix

Monetization strategy for iOS/macOS apps. An agent skill from gustavscirulis/snapgrid.

gustavscirulis/snapgrid

Owns legal, contracts, intellectual property, regulatory compliance, privacy, security governance, enterprise risk, and audit readiness.

cbrock84/headcount

Designs and tests controls over financial reporting — segregation of duties, approval limits, evidence, and preparing for audit.

cbrock84/headcount

公开 workflow：创建、修改或迁移项目拥有的 Agent Skill package，或对现有/外部 package 做用户明确要求、零执行的只读验证与 readiness 报告时使用；也用于按已接受的 audit finding 修复 source skill。不要用于一次性回答、解释/总结/翻译、普通代码 review、第三方 Skill 纯安装或导入、跨仓批量修改，或直接修补…

leo-kuang-ai/spec-first

Find weak pages, technical issues, and content gaps in SE Ranking, then coordinate the fix end-to-end in Planable — drafting the rewritten page copy in a Universal content page for feedback and…

seranking/seo-skills

Provides documentation audit checklists and quality standards.

microsoft-foundry/foundry-agent-webapp

Format, select, and prepare a manuscript for journal submission.

joshzyj/open-scholar-skill

Hack23 ISMS organization-wide compliance requirements, policy enforcement, audit preparation

Hack23/cia

Write a corrective action report, CAPA, respond to an NCR or audit finding, or document an 8D D5 root cause action.

hashgraph-online/awesome-codex-plugins

Conduct an internal audit by clause, answer ISO 9001 internal audit questions, or prepare evidence for §4 §5 §6 §7 §8 §9 §10.

hashgraph-online/awesome-codex-plugins

Medical quality-system and documentation workflow guide for ISO 13485, FDA QMSR, design controls, risk management, CAPA, document control, supplier qualification, complaint handling, and audit…

DrugClaw/DrugClaw

Guides continuous privacy compliance monitoring implementation including automated control testing, evidence collection automation, real-time compliance dashboards, alert-based remediation…

mukul975/Privacy-Data-Protection-Skills

Guides internal privacy audit program design and execution including risk-based audit planning, scope definition, fieldwork procedures, finding classification, evidence gathering, remediation…

mukul975/Privacy-Data-Protection-Skills

A skill your agent uses when asked 5S 检查表, 6S 管理, 现场管理检查, 5S 评分标准, 车间 6S 稽核, 做一份 5S 推行计划, or design a 5S or 6S audit for a workshop, warehouse or office in a Chinese factory.

mohitagw15856/pm-claude-skills

Generate a prioritised compliance checklist for GDPR, SOC 2, ISO 27001, FCA, HIPAA, or other frameworks with a gap analysis.

mohitagw15856/pm-claude-skills

Prepare a transport operation for a regulatory audit — the records an auditor asks for in order, the findings your own file will produce, and the gaps closed before the visit rather than during it.

mohitagw15856/pm-claude-skills

Interactive internal audit guide for ISO 9001:2015 and IATF 16949:2016 — walks through key clauses interactively, scores findings as Major NC / Minor NC / OFI, and generates a structured audit report.

hashgraph-online/awesome-codex-plugins

Prepare audit-ready request trackers, evidence indexes, walkthroughs, control test workpapers, sample support, and issue responses.

rongxinzy/RongxinAI

Guides audit findings remediation program management including finding prioritization by severity (critical, high, medium, low), owner assignment, remediation planning, deadline tracking…

mukul975/Privacy-Data-Protection-Skills

For a batch of findings from a non-security audit tool (<audit-tool — ruff / flake8 / mypy / pylint / CodeQL / Apache Verum / Apache Caer / equivalent; full list in the body) against <upstream…

apache/magpie

Conduct an IATF audit, check supplemental requirements, or prepare for a manufacturing process audit or IATF 16949:2016 third-party assessment.

hashgraph-online/awesome-codex-plugins