Agent skill

Compliance Audit

by WellApp-ai in WellApp-ai/Well

Audit Value Delivery compliance after PR push. An agent skill from WellApp-ai/Well.

MITAuto-check passedDevelopment

Install Compliance Audit

skills CLI
$ npx skills add WellApp-ai/Well --skill compliance-audit -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI
$ gh skill install WellApp-ai/Well compliance-audit --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy
$ git clone --depth 1 https://github.com/WellApp-ai/Well.git skills-src && mkdir -p .claude/skills && cp -r skills-src/cursor-rules/skills/compliance-audit .claude/skills/compliance-audit && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Facts

Skill name
compliance-audit
GitHub stars
345
Token cost
~762 tokens
SKILL.md length
273 words
Files
1
Skills in repo
36
Repo updated
First seen
Licence
MIT

At a glance

Audit Value Delivery compliance after PR push. An agent skill from WellApp-ai/Well.

  • Works in 4 steps: Gather Session Data → Check Compliance Requirements → Generate Compliance Report → …
  • Development work in your project
  • SKILL.md covers When to Use, Phase 1: Gather Session Data, Phase 2: Check Compliance… and Phase 3: Generate Compliance…, plus 4 more sections
  • Calls git

What it does

Compliance Audit is an agent skill from WellApp-ai/Well. Audit Value Delivery compliance after PR push

Its SKILL.md is about 760 tokens, which your agent loads only when the skill is triggered. It is a single SKILL.md file with no bundled scripts.

It sits in Development. It works with Git. The repository describes itself as: No more Sundays on Finance. We build the infrastructure that retrieves, processes, and routes your financial and business data to your FinOps stack, so founders can ship, not… The licence is MIT.

When your agent uses it

  • Development work in your project

Example prompts

  • “/compliance-audit”

Workflow steps

4 steps, taken from the step headings in SKILL.md.

  1. Gather Session Data
  2. Check Compliance Requirements
  3. Generate Compliance Report
  4. Log to Session Journal

What it can do on your machine

Read from SKILL.md and the folder at commit c740217. It shows what the files ask for, not the result of running them.

  • Tool permissions

    Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.

    From allowed-tools in the SKILL.md frontmatter.

  • Runs code

    Shell commands in SKILL.md call:

    • git

    From the folder's file list and the shell code blocks in SKILL.md.

  • Network

    No URLs in SKILL.md. Its commands use git, which can reach the network depending on how they are called.

    From URLs in SKILL.md, links to its own repository left out.

  • Credentials

    Names no API keys, tokens, secrets or passwords.

    From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

Compliance Audit loads about 762 tokens when it runs. Until then it costs about 16 tokens; SKILL.md has 273 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it
~16
When it runs · the whole SKILL.md, loaded when a task matches
~762

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check passed

The automated check found no risky patterns in SKILL.md.

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.

SKILL.md

The full file from WellApp-ai/Well at commit c740217, republished under its MIT licence (© WellApp-ai). 273 words, ~762 tokens.

Download SKILL.mdSave it as .claude/skills/compliance-audit/SKILL.md (or your agent's skills folder).
name
compliance-audit
description
Audit Value Delivery compliance after PR push

Compliance Audit Skill

Run after PR push to verify Value Delivery rules were followed during the session.

When to Use

  • After PR is pushed (invoke from push-pr mode)
  • Manually with "use compliance-audit skill"
  • When reviewing session quality

Phase 1: Gather Session Data

Collect data from the current session:

Data PointSource
Commit countgit rev-list origin/develop..HEAD --count
Files changedgit diff origin/develop --name-only | wc -l
Lines of codegit diff origin/develop --stat | tail -1
console.log presenceGrep in changed files

Phase 2: Check Compliance Requirements

2.1 PR Threshold Check
MetricCurrentThresholdStatus
Lines of Code[N]300OK/CROSSED ([X]x)
Files Changed[N]10OK/CROSSED ([X]x)
Commits[N]5OK/CROSSED ([X]x)
console.log[N]0OK/CROSSED

Verdict: [PASSED / TRIGGER_PR - Should have pushed earlier PRs]

2.2 Gaps Identified
RequirementExpectedActualStatus
Session Headers/FootersEvery response[Count]Done/Missing
pr-review skill formatFull report[Format]Done/Partial/Missing
qa-commit skill formatFull criteria table[Format]Done/Partial/Missing
pr-threshold checksAfter each commit[Count]Done/Partial/Missing
Risk AssessmentCalculate score[Done/Not]Done/Missing
Storybook storiesFor new components[Count]Done/Missing
Design system checkBefore new patterns[Done/Not]Done/Partial/Missing
Satisfies field in commitsEvery commit[Count]Done/Missing
Typecheck/LintBefore commits[Done/Not]Done/Missing

Phase 3: Generate Compliance Report

markdown
## Value Delivery Compliance Audit

### PR Threshold Check

| Metric | Current | Threshold | Status |
|--------|---------|-----------|--------|
| Lines of Code | [N] | 300 | [status] |
| Files Changed | [N] | 10 | [status] |
| Commits | [N] | 5 | [status] |
| console.log | [N] | 0 | [status] |

**Verdict:** [PASSED / TRIGGER_PR]

### Gaps Identified

| Requirement | Expected | Actual | Status |
|-------------|----------|--------|--------|
| [requirement] | [expected] | [actual] | [status] |
...

### Recommendations

[List any improvements for next session]

Phase 4: Log to Session Journal

If using Notion sync, add compliance report to Session Journal entry.

Output Format

The audit should produce a table matching the format shown in the user's compliance screenshot, with clear CROSSED indicators for threshold violations and status icons for gap analysis.

Integration

This skill is invoked by:

  • push-pr.mdc - After PR is created (Phase 4)
  • Manual invocation for retrospective

Invocation

Invoked automatically after PR push, or manually with "use compliance-audit skill".

© WellApp-ai, MIT. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file

Files

Just SKILL.md in cursor-rules/skills/compliance-audit of WellApp-ai/Well.

Open the folder on GitHubat commit c740217

Compare with similar skills

Compliance Audit next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

Compliance Audit compared with similar skills
SkillStarsUsed inTokensAuto-checkLicenceRepo updated
Compliance Audit this skillWellApp-ai/Well345—~762Automated safety check: PassMIT
Finishing a Development Branchobra/superpowers297k5 repos~1.9kAutomated safety check: PassMIT
Code Review ChecklistshareAI-lab/learn-claude-code78k4 repos~1.1kAutomated safety check: PassMIT
Contributor-First PR MergeHKUDS/OpenHarness16k1 repos~847Automated safety check: PassMIT
Finishing A Development Branchfarm-fe/farm5.6k35 repos~1.8kAutomated safety check: PassMIT
Migrate Internal Package into GhostTryGhost/Ghost56k—~3.8kAutomated safety check: PassMIT

Similar skills

  • Walks the last step of a branch: confirm tests pass, detect the git environment, ask how to integrate, carry out your choice and clean up the worktree.

    297k GitHub starsUsed in 5 repos~1.9k tokens
    DevelopmentAuto-check passed
  • Code Review Checklist

    shareAI-lab/learn-claude-code

    Reviews code against a five-part checklist covering security, correctness, performance, maintainability and testing, and reports findings in a fixed format.

    78k GitHub starsUsed in 4 repos~1.1k tokens
    DevelopmentAuto-check passed
  • Merges external GitHub pull requests while keeping the original author credited, and fixes conflicts after the merge instead of rewriting the contribution.

    16k GitHub starsUsed in 1 repo~847 tokens
    DevelopmentAuto-check passed
  • A skill your agent uses when implementation is complete, all tests pass, and you need to decide how to integrate the work - guides completion of development work by presenting structured options for…

    5.6k GitHub starsUsed in 35 repos~1.8k tokens
    DevelopmentAuto-check passed
  • Moves a package from another TryGhost repository into Ghost as an internal workspace package while keeping its Git history, with checkpoints for the steps that need an administrator.

    56k GitHub stars~3.8k tokensUpdated today
    DevelopmentAuto-check passed
  • Doc Sync

    JetBrains/ideavim

    Official

    Keeps IdeaVim documentation in sync with code changes. An agent skill from JetBrains/ideavim.

    10k GitHub starsUsed in 2 repos~2.6k tokens
    DevelopmentAuto-check passed

More from WellApp-ai/Well

All 36 skills in this repo
  • Tech Divergence

    WellApp-ai/Well

    Evaluate technical options with scoring matrix, trigger Gate 4 for significant decisions

    345 GitHub stars~1.3k tokensUpdated 3 days ago
    Auto-check passed
  • Ar Aging

    WellApp-ai/Well

    Produce an accounts-receivable aging report and surface overdue invoices for a Well workspace.

    345 GitHub stars~532 tokensUpdated 3 days ago
    Auto-check passed
  • Autonomous Loop

    WellApp-ai/Well

    Iterate until success or limit, composing existing skills with Jidoka integration

    345 GitHub stars~1k tokensUpdated 3 days ago
    Auto-check passed
  • Balance Sheet

    WellApp-ai/Well

    Build a balance sheet (bilan) from a Well workspace. An agent skill from WellApp-ai/Well.

    345 GitHub stars~534 tokensUpdated 3 days ago
    Auto-check passed
  • Bpmn Workflow

    WellApp-ai/Well

    Generate and maintain BPMN 2.0 diagrams linked to Gherkin scenarios

    345 GitHub stars~1.4k tokensUpdated 3 days ago
    Auto-check passed
  • Cash Flow Forecast

    WellApp-ai/Well

    Forecast cash flow and runway for a Well workspace from booked invoices and collected bank transactions.

    345 GitHub stars~567 tokensUpdated 3 days ago
    Auto-check passed

Works with

Categories

Questions about Compliance Audit

What does Compliance Audit do?

Audit Value Delivery compliance after PR push. An agent skill from WellApp-ai/Well. Compliance Audit is an agent skill from WellApp-ai/Well.

When should I use Compliance Audit?

Compliance Audit fits situations like: development work in your project.

How do I install Compliance Audit in Claude Code?

Run `npx skills add WellApp-ai/Well --skill compliance-audit -a claude-code`. Or copy the skill folder (cursor-rules/skills/compliance-audit in WellApp-ai/Well) into .claude/skills/compliance-audit in your project. Claude Code loads it when a task matches its description.

How do I install Compliance Audit in Codex?

Run `npx skills add WellApp-ai/Well --skill compliance-audit -a codex`. Or copy the skill folder (cursor-rules/skills/compliance-audit in WellApp-ai/Well) into .agents/skills/compliance-audit in your project. Codex loads it when a task matches its description.

Can I use Compliance Audit in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add WellApp-ai/Well --skill compliance-audit -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/compliance-audit, .gemini/skills/compliance-audit, .github/skills/compliance-audit and .opencode/skills/compliance-audit in your project.

What does Compliance Audit need to run?

Going by SKILL.md and its folder, Compliance Audit needs the command-line tools its instructions call (git).

Does Compliance Audit access the network?

SKILL.md contains no URLs. Its commands use git, which can reach the network depending on how they are called. This is read from the text; nothing was executed.

Is Compliance Audit safe to install?

Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.

What licence does Compliance Audit use?

Compliance Audit is published under the MIT licence (the repository's licence). It allows redistribution, so the full SKILL.md is shown on this page.

How many tokens does Compliance Audit use?

About 762 tokens (SKILL.md is roughly 3k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.

What are the alternatives to Compliance Audit?

Skills that share tags, products or a category with Compliance Audit: Finishing a Development Branch (obra/superpowers, 297k stars), Code Review Checklist (shareAI-lab/learn-claude-code, 78k stars), Contributor-First PR Merge (HKUDS/OpenHarness, 16k stars) and Finishing A Development Branch (farm-fe/farm, 5.6k stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains Compliance Audit?

WellApp-ai (a GitHub organization) maintains it in WellApp-ai/Well, which has 345 GitHub stars. The repository holds 36 skills in this directory. The repository was last updated on October 7, 2026.

Source: WellApp-ai/Well on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.