Gpg Signing
Prorise-cool/Claude-Code-Multi-Agent
Comprehensive guide to GPG commit signing. An agent skill from Prorise-cool/Claude-Code-Multi-Agent.
Privacy and security compliance scanner for the Finance Guru repo.
Install Compliance Scan
$ npx skills add AojdevStudio/Finance-Guru --skill compliance-scan -a claude-codeProject install by default; add -g for ~/.claude/skills/.
$ gh skill install AojdevStudio/Finance-Guru compliance-scan --agent claude-codeProject scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).
$ git clone --depth 1 https://github.com/AojdevStudio/Finance-Guru.git skills-src && mkdir -p .claude/skills && cp -r skills-src/.claude/skills/compliance-scan .claude/skills/compliance-scan && rm -rf skills-srcUse ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.
Claude Code skills documentation · loads skills from .claude/skills/
Install the "compliance-scan" agent skill from https://github.com/AojdevStudio/Finance-Guru/tree/main/.claude/skills/compliance-scan into .claude/skills/compliance-scan/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "compliance-scan", then confirm the skill loads.Claude Code copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$skill-installer install https://github.com/AojdevStudio/Finance-Guru/tree/main/.claude/skills/compliance-scanType this inside Codex. $skill-installer <name> installs a curated skill from openai/skills. The installer writes to $CODEX_HOME/skills (default ~/.codex/skills). Restart Codex if the skill does not show up.
$ npx skills add AojdevStudio/Finance-Guru --skill compliance-scan -a codexProject install goes to .agents/skills/; add -g for ~/.codex/skills/.
$ gh skill install AojdevStudio/Finance-Guru compliance-scan --agent codexProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/AojdevStudio/Finance-Guru.git skills-src && mkdir -p .agents/skills && cp -r skills-src/.claude/skills/compliance-scan .agents/skills/compliance-scan && rm -rf skills-srcUse ~/.agents/skills/ instead of .agents/skills for a personal install.
Codex skills documentation · loads skills from .agents/skills/
Install the "compliance-scan" agent skill from https://github.com/AojdevStudio/Finance-Guru/tree/main/.claude/skills/compliance-scan into .agents/skills/compliance-scan/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "compliance-scan", then confirm the skill loads.Codex copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add AojdevStudio/Finance-Guru --skill compliance-scan -a cursorProject install goes to .agents/skills/; add -g for ~/.cursor/skills/.
$ gh skill install AojdevStudio/Finance-Guru compliance-scan --agent cursorProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/AojdevStudio/Finance-Guru.git skills-src && mkdir -p .cursor/skills && cp -r skills-src/.claude/skills/compliance-scan .cursor/skills/compliance-scan && rm -rf skills-srcUse ~/.cursor/skills/ instead of .cursor/skills for a personal install.
Cursor skills documentation · loads skills from .cursor/skills/, .agents/skills/, .claude/skills/, .codex/skills/
Install the "compliance-scan" agent skill from https://github.com/AojdevStudio/Finance-Guru/tree/main/.claude/skills/compliance-scan into .cursor/skills/compliance-scan/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "compliance-scan", then confirm the skill loads.Cursor copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gemini skills install https://github.com/AojdevStudio/Finance-Guru.git --path .claude/skills/compliance-scan--scope user (default) or --scope workspace; --path is the subfolder of the repo that holds the skill; --consent skips the security confirmation prompt.
$ npx skills add AojdevStudio/Finance-Guru --skill compliance-scan -a gemini-cliProject install goes to .agents/skills/; add -g for ~/.gemini/skills/.
$ gh skill install AojdevStudio/Finance-Guru compliance-scan --agent gemini-cliProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/AojdevStudio/Finance-Guru.git skills-src && mkdir -p .gemini/skills && cp -r skills-src/.claude/skills/compliance-scan .gemini/skills/compliance-scan && rm -rf skills-srcUse ~/.gemini/skills/ instead of .gemini/skills for a personal install, then run /skills reload.
Gemini CLI skills documentation · loads skills from .gemini/skills/, .agents/skills/
Install the "compliance-scan" agent skill from https://github.com/AojdevStudio/Finance-Guru/tree/main/.claude/skills/compliance-scan into .gemini/skills/compliance-scan/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "compliance-scan", then confirm the skill loads.Gemini CLI copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gh skill install AojdevStudio/Finance-Guru compliance-scanInstalls for Copilot at project scope by default; add --scope user for a personal install. Preview a skill first with gh skill preview. Needs GitHub CLI 2.90.0 or later (public preview).
$ npx skills add AojdevStudio/Finance-Guru --skill compliance-scan -a github-copilotProject install goes to .agents/skills/; add -g for ~/.copilot/skills/.
$ git clone --depth 1 https://github.com/AojdevStudio/Finance-Guru.git skills-src && mkdir -p .github/skills && cp -r skills-src/.claude/skills/compliance-scan .github/skills/compliance-scan && rm -rf skills-srcUse ~/.copilot/skills/ instead of .github/skills for a personal install. Commit .github/skills so cloud agent and code review can use it.
GitHub Copilot skills documentation · loads skills from .github/skills/, .claude/skills/, .agents/skills/
Install the "compliance-scan" agent skill from https://github.com/AojdevStudio/Finance-Guru/tree/main/.claude/skills/compliance-scan into .github/skills/compliance-scan/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "compliance-scan", then confirm the skill loads.GitHub Copilot copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add AojdevStudio/Finance-Guru --skill compliance-scan -a opencodeOpenCode documents no install command of its own. Project install goes to .agents/skills/; add -g for ~/.config/opencode/skills/.
$ gh skill install AojdevStudio/Finance-Guru compliance-scan --agent opencodeProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/AojdevStudio/Finance-Guru.git skills-src && mkdir -p .opencode/skills && cp -r skills-src/.claude/skills/compliance-scan .opencode/skills/compliance-scan && rm -rf skills-srcUse ~/.config/opencode/skills/ instead of .opencode/skills for a personal install.
OpenCode skills documentation · loads skills from .opencode/skills/, .claude/skills/, .agents/skills/
Install the "compliance-scan" agent skill from https://github.com/AojdevStudio/Finance-Guru/tree/main/.claude/skills/compliance-scan into .opencode/skills/compliance-scan/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "compliance-scan", then confirm the skill loads.OpenCode copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
Facts
- Skill name
compliance-scan- GitHub stars
- 322
- Token cost
- ~2.6k tokens
- SKILL.md length
- 1,019 words
- Files
- 8 (incl. scripts, references)
- Skills in repo
- 18
- Repo updated
- First seen
- Licence
- Custom licence
At a glance
Privacy and security compliance scanner for the Finance Guru repo.
- Works in 4 steps: Identifies the smallest containing… → Appends / to .gitignore under a #… → Re-runs git check-ignore to verify the… → …
- The user says compliance scan
- SKILL.md covers When to invoke, What it checks (seven layers), What counts as private and Severity gate, plus 12 more sections
- Runs Shell and Python scripts from its folder; calls git, uv and bash
What it does
Compliance Scan is an agent skill from AojdevStudio/Finance-Guru. Privacy and security compliance scanner for the Finance Guru repo. Catches API tokens, account numbers, dispatcher URLs, owner-name leaks, untracked sensitive files, and gitignore gaps before they reach GitHub. Use this skill whenever the user says "compliance scan", "is this safe to push", "scan for PII", "secrets check", "pre-commit security", "pre-push security", "check for leaks", "PRIVACY.md compliance", "audit privacy", "any leaks", "check before push", or wants a sanity check before git push. Also run it…
Its SKILL.md is about 2.6k tokens, which your agent loads only when the skill is triggered. The skill folder holds 9 other files, including scripts and reference files (for example `allowlist.json`, `references/DataClassification.md` and `references/secret-patterns.md`).
It sits in Backend & APIs, covering Webhooks and SOC 2 and security compliance. It works with GitHub and Git. The repository describes itself as: Self-hosted family office engine: typed Python calculators, a private SQLite ledger, and specialist agents for Claude Code and Codex. Agents propose. Typed code computes.
When your agent uses it
- The user says compliance scan
- Is this safe to push
- Pre-commit security
- Pre-push security
Example prompts
- “compliance scan”
- “is this safe to push”
- “scan for PII”
- “/compliance-scan”
Requirements
- Python 3
- A Bash shell
Workflow steps
4 steps, taken from the first numbered list in SKILL.md.
- Identifies the smallest containing directory that's a sensible ignore unit (the immediate parent under .claude/skills/, the file itself…
- Appends / to .gitignore under a # Compliance scan auto-remediation block, creating the block if absent
- Re-runs git check-ignore to verify the path is now shielded
- Reports what was added so you can review the diff
What it can do on your machine
Read from SKILL.md and the folder at commit 90c235e. It shows what the files ask for, not the result of running them.
Tool permissions
Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.
From allowed-tools in the SKILL.md frontmatter.
Runs code
Ships 2 files in scripts/ (Shell and Python), which the agent can run.
Shell commands in SKILL.md call:
gituvbash
From the folder's file list and the shell code blocks in SKILL.md.
Network
No URLs in SKILL.md. Its commands use git and uv, which can reach the network depending on how they are called.
From URLs in SKILL.md, links to its own repository left out.
Credentials
Names no API keys, tokens, secrets or passwords.
From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.
Context cost
Compliance Scan loads about 2.6k tokens when it runs, and up to ~7k if it reads all its reference files. Until then it costs about 206 tokens; SKILL.md has 1,019 words of instructions outside code blocks.
Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.
Safety
Auto-check: notes
The automated check noted patterns worth knowing about, such as sudo or a known installer.
- NoteMentions a .env fileSKILL.md:27
s/`, `notebooks/`, `fin-guru-private/`, `.env*`) | `scripts/scan.py` | - NoteMentions a .env fileSKILL.md:78
s/`, `notebooks/`, `fin-guru-private/`, `.env*`). Idempotent — re-running won't create duplicate entries. - NoteMentions a .env fileSKILL.md:123
`.claude/skills/`, the file itself for `.env*`, etc.) - NoteMentions a .env fileSKILL.md:177
- `.env`, `.env.*`, `*.env`
Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); the scripts in this folder are not scanned.
SKILL.md
Its licence (Custom licence) doesn't allow us to republish the file, so here is its outline and opening line. It has 1,019 words (~2,627 tokens).
“The repo's last line of defense before something compromising hits GitHub. Layered scanner that runs the existing privacy tests, looks for new patterns of leakage, and (optionally) wires itself into git push so a failed scan blocks the push.”
- name
- compliance-scan
Files
SKILL.md and 7 other files (scripts, references) in .claude/skills/compliance-scan of AojdevStudio/Finance-Guru.
- SKILL.md
- allowlist.json
- references/DataClassification.md
- references/secret-patterns.md
- references/severity-guide.md
- references/test-pii-pattern.md
- scripts/install-pre-push.sh
- scripts/scan.py
Open the folder on GitHubat commit 90c235e
Compare with similar skills
Compliance Scan next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.
| Skill | Stars | Used in | Tokens | Auto-check | Licence | Repo updated |
|---|---|---|---|---|---|---|
| Compliance Scan this skillAojdevStudio/Finance-Guru | 322 | — | ~2.6k | Automated safety check: Notes | Custom licence | |
| Gpg SigningProrise-cool/Claude-Code-Multi-Agent | 305 | — | ~3.9k | Automated safety check: Warn | None | |
| Create Triggerharness/harness-skills | 115 | — | ~1.5k | Automated safety check: Pass | Apache-2.0 | |
| GitHub OAuth Nango IntegrationAgentWorkforce/relay | 865 | 1 repos | ~3.4k | Automated safety check: Pass | Apache-2.0 | |
| Squash BugbotLFDT-Lineth/lineth-monorepo | 126 | — | ~3.3k | Automated safety check: Pass | Apache-2.0 | |
| Frontmcp Channelsagentfront/frontmcp | 146 | — | ~3.7k | Automated safety check: Pass | Apache-2.0 |
Similar skills
Create Trigger
harness/harness-skills
Generate Harness Trigger YAML for automated pipeline execution and create via MCP.
GitHub OAuth Nango Integration
AgentWorkforce/relay
A skill your agent uses when implementing GitHub OAuth + GitHub App authentication with Nango - provides two-connection pattern for user login and repo access with webhook handling
Squash Bugbot
LFDT-Lineth/lineth-monorepo
Triage unresolved bot review comments on a GitHub PR. An agent skill from LFDT-Lineth/lineth-monorepo.
Frontmcp Channels
agentfront/frontmcp
A skill your agent uses when pushing real-time notifications or events into Claude Code (or another MCP client) sessions, or building two-way chat bridges.
Add OAuth Integration
rome-os/rome
Add a new Rome-managed OAuth integration for a third-party service so a user can delegate access by clicking Connect, and Rome can act on the service with the delegated token (the GitHub/Slack model…
More from AojdevStudio/Finance-Guru
All 18 skills in this repoDividend Tracking
AojdevStudio/Finance-Guru
Refresh the local DB, then read and analyze DIVIDEND rows from familyoffice.db for Layer 2 income tracking.
Fin Guru Compliance Review
AojdevStudio/Finance-Guru
Compliance review of a Finance Guru deliverable or a proposed position.
Fin Guru Output Contract
AojdevStudio/Finance-Guru
The six-part shape of every Finance Guru analysis answer: bottom line, a numbers table that names the source command, assumptions and gaps, confidence, evidence, and the disclaimer.
Fin Guru Quant Analysis
AojdevStudio/Finance-Guru
Quantitative analysis of tickers or the portfolio through the engine's calculators.
Fin Guru Strategize
AojdevStudio/Finance-Guru
Turn research and quantitative results into a portfolio strategy with allocation changes, entry timing, position sizing, margin and dividend tactics, and an implementation plan with triggers.
Finance Report
AojdevStudio/Finance-Guru
Generate institutional-quality PDF analysis reports for stocks and ETFs.
Related
Categories
Questions about Compliance Scan
What does Compliance Scan do?
Privacy and security compliance scanner for the Finance Guru repo. Compliance Scan is an agent skill from AojdevStudio/Finance-Guru. Privacy and security compliance scanner for the Finance Guru repo.
When should I use Compliance Scan?
Compliance Scan fits situations like: the user says compliance scan; is this safe to push; pre-commit security; pre-push security.
How do I install Compliance Scan in Claude Code?
Run `npx skills add AojdevStudio/Finance-Guru --skill compliance-scan -a claude-code`. Or copy the skill folder (.claude/skills/compliance-scan in AojdevStudio/Finance-Guru) into .claude/skills/compliance-scan in your project. Claude Code loads it when a task matches its description.
How do I install Compliance Scan in Codex?
Run `npx skills add AojdevStudio/Finance-Guru --skill compliance-scan -a codex`. Or copy the skill folder (.claude/skills/compliance-scan in AojdevStudio/Finance-Guru) into .agents/skills/compliance-scan in your project. Codex loads it when a task matches its description.
Can I use Compliance Scan in Cursor, Gemini CLI or GitHub Copilot?
Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add AojdevStudio/Finance-Guru --skill compliance-scan -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/compliance-scan, .gemini/skills/compliance-scan, .github/skills/compliance-scan and .opencode/skills/compliance-scan in your project.
What does Compliance Scan need to run?
Going by SKILL.md and its folder, Compliance Scan needs a shell and Python for the scripts in its folder and the command-line tools its instructions call (git, uv and bash). Our summary lists: Python 3; A Bash shell.
Does Compliance Scan access the network?
SKILL.md contains no URLs. Its commands use git and uv, which can reach the network depending on how they are called. This is read from the text; nothing was executed.
Is Compliance Scan safe to install?
Our automated static check of SKILL.md found notes only (mentions a .env file), nothing it rates as a warning. It is not a guarantee. The check reads SKILL.md only: the scripts in the folder are not scanned, so read them before running anything.
What licence does Compliance Scan use?
Compliance Scan has a licence file (the repository's licence) that doesn't match a standard licence. Read it on GitHub before reusing the skill.
How many tokens does Compliance Scan use?
About 2.6k tokens (SKILL.md is roughly 11k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full. Its references folder adds about 4.4k tokens, read only when the agent opens those files.
What are the alternatives to Compliance Scan?
Skills that share tags, products or a category with Compliance Scan: Gpg Signing (Prorise-cool/Claude-Code-Multi-Agent, 305 stars), Create Trigger (harness/harness-skills, 115 stars), GitHub OAuth Nango Integration (AgentWorkforce/relay, 865 stars) and Squash Bugbot (LFDT-Lineth/lineth-monorepo, 126 stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.
Who maintains Compliance Scan?
AojdevStudio (a GitHub user) maintains it in AojdevStudio/Finance-Guru, which has 322 GitHub stars. The repository holds 18 skills in this directory. The repository was last updated on October 6, 2026.
Source: AojdevStudio/Finance-Guru on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.