Compliance & Audit Skills

Curated agent skills for automated compliance auditing, evidence gathering, and security benchmarking.

Target Skill Areas

• ai-governance-audit: Artificial Intelligence Management System (ISO/IEC 42001:2023) and EU AI Act (Regulation EU 2024/1689) technical conformity, data provenance (B.9.2), automated logging verification, and edge WAF injection defenses.
• cis-complete-audit: Comprehensive multi-layer audit engine covering Cloud Foundations (AWS, Azure, GCP), Kubernetes (v1.9), Linux Hosts (Ubuntu/RHEL), and Docker Containers.
• cis-benchmark-audit: Targeted inspection of cloud configurations against CIS Foundation Benchmarks.
• soc2-evidence-collector: Generating audit-ready evidence for access reviews, change management, and encryption at rest/transit.
• owasp-llm-security: Pre-merge code scanning, prompt sandboxing, output validation, and edge WAF rule alignment against OWASP Top 10 for LLMs.