القائمة
Validates AWS readiness for website deployment. Checks CLI tools, credentials, SES, Route 53, and ACM. Produces a report with pass/fail and action items.
التثبيت باستخدام Codex أو Claude انسخ هذا Prompt والصقه في Codex أو Claude أو مساعد آخر ليراجع صفحة Skill ويثبّتها لك.
استنادا إلى تصنيف SOC المهني
Build and deploy a production-ready Trust Center for any company. Use this skill whenever someone asks to create a trust center, compliance portal, security page, or wants to publish their SOC 2/SOC 3/ISO 27001/HIPAA/compliance posture publicly. Also triggers when someone mentions gated document access for audit reports, NDA-based document sharing, or wants to replace paid trust center tools like Secureframe, Vanta, Drata, or SafeBase. Even if they just say "I need a place to share my SOC 2 with customers" — that's a trust center. Use this skill.
NIST Cybersecurity Framework v2.0 expert. Reference-depth knowledge of the six Functions (Govern, Identify, Protect, Detect, Respond, Recover), Categories and Subcategories, Profiles (Current vs Target), Tiers, Implementation Examples, and the practitioner workflow of using CSF as a board-readable cybersecurity outcomes language. Backed by the SCF crosswalk for control-by-control mechanics.
Verbatim reference for all 320 NIST 800-171A Rev 2 assessment objectives, plus the Rev 2 → Rev 3 control crosswalk. Use for AO-level lookups (e.g., 3.1.1[c]), evidence planning, and forward-mapping to Rev 3. Pairs with cmmc-expert.
CMMC v2.0 expert for DoD contractors. Covers NIST 800-171 Rev 2 (14 families, 110 controls), SPRS scoring, POA&M rules, 32 CFR Part 170, DFARS clauses, scoping, ESP/CSP, C3PAO assessment lifecycle, and Rev 2 → Rev 3 transition.
Interpret testssl-inspector normalized findings, recommend remediations, and tie evidence back to SCF anchor controls plus SOC 2 / NIST 800-53 r5 / PCI DSS 4.0.1 / ISO 27002:2022 equivalents derived from SCF crosswalks.
Scaffolds a complete React/Vite website project from site-config.json. Generates components, styles, and configuration based on the site type and plan data.
| name | website-preflight |
| description | Validates AWS readiness for website deployment. Checks CLI tools, credentials, SES, Route 53, and ACM. Produces a report with pass/fail and action items. |
| allowed-tools | Bash, Read, Write, Edit, Glob |
You are running the /grc-portfolio:preflight skill. Your job is to validate that all prerequisites are met for deploying a website to AWS, and guide the user through any human tasks required.
Find site-config.json:
$ARGUMENTS for a project directory pathRead it to understand what features are enabled and what AWS configuration is needed.
Run each check and record the result as PASS or FAIL:
AWS CLI installed
aws --version
If missing: suggest running $TOOLKIT_DIR/scripts/bootstrap.sh
Node.js installed (v18+)
node --version
npm installed
npm --version
AWS credentials configured
aws sts get-caller-identity --profile <aws.profile>
Record the account ID and ARN for the report.
AWS region set to us-east-1
Verify aws.region in config is us-east-1 (required for CloudFront + ACM).
CloudFormation templates valid
Run $TOOLKIT_DIR/scripts/validate-stack.sh against the appropriate template:
features.customDomain: validate $TOOLKIT_DIR/cloudformation/website-infrastructure.yaml$TOOLKIT_DIR/cloudformation/website-infrastructure-no-domain.yamlSES email verified (if features.contactForm)
aws ses get-identity-verification-attributes --identities <client.email> --profile <aws.profile> --region us-east-1
Check that the status is "Success".
Route 53 hosted zone exists (if features.customDomain)
aws route53 list-hosted-zones-by-name --dns-name <aws.domain> --profile <aws.profile>
If found, save the hosted zone ID to aws.hostedZoneId in config.
ACM certificate exists in us-east-1 (if features.customDomain)
aws acm list-certificates --region us-east-1 --profile <aws.profile> --query "CertificateSummaryList[?DomainName=='<aws.domain>']"
If found and status is "ISSUED", save the ARN to aws.certArn in config.
gh CLI installed (for future /grc-portfolio:repo and /grc-portfolio:cicd steps)
gh --version
Output a formatted report with three sections:
List all checks that passed with a checkmark.
Things that can be fixed automatically -- offer to run the fix:
Things the user must do manually. For each, provide:
Common human tasks:
brew install gh && gh auth loginIf there are human action items, tell the user to complete them and then say "ready" or "done" to re-run the checks.
When they indicate completion, re-run only the previously-failed checks.
Once all checks pass:
aws.hostedZoneId if discoveredaws.certArn if discoveredstatus.preflightComplete = truesite-config.jsonTell the user:
/grc-portfolio:build next (if not done) or /grc-portfolio:infra to deploy infrastructure$TOOLKIT_DIR = read from site-config.json toolkitDir field$ARGUMENTS = arguments passed after /grc-portfolio:preflight (expected: project directory path)