Menu
Generate professional compliance reports (Markdown, HTML, PDF) from the latest scan data.
Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.
Based on SOC occupation classification
Deep code scan for AI security issues — prompt injection, PII in prompts, hardcoded keys, unguarded agents.
Run AI governance checks across cloud accounts and code repos — ISO 42001, EU AI Act, NIST AI RMF compliance.
Scan cloud accounts and GitHub repos to discover AI/ML services and build an AI system inventory.
Walk staged changes against the engineering principles checklist and report pass/fail per principle. Run before any non-trivial commit. Catches doc drift, stub functions, single-region defaults, missing framework mappings, and other regressions before they ship.
Generate a public-facing security trust page from scan data. Produces a single deployable index.html that shows compliance framework scores, security policies, infrastructure overview, and data protection posture. Deployable to S3, Vercel, Netlify, or GitHub Pages.
Paste a vendor's domain. Get a security risk assessment in 60 seconds.
| name | report |
| description | Generate professional compliance reports (Markdown, HTML, PDF) from the latest scan data. |
| user-invocable | true |
Generate professional SOC 2 compliance reports.
Read shasta.config.json for python_cmd. Use that for all commands (shown as <PYTHON_CMD>).
<PYTHON_CMD> -c "
from shasta.db.schema import ShastaDB
db = ShastaDB(); db.initialize()
scan = db.get_recent_scan(max_age_minutes=60)
if scan:
print(f'RECENT_SCAN|{scan.id}|{scan.completed_at}|{len(scan.findings)} findings')
else:
print('NO_RECENT_SCAN')
"
If recent scan exists, ask user: "Generate reports from scan at , or run a fresh scan first?"
Using recent scan:
<PYTHON_CMD> -c "
from shasta.db.schema import ShastaDB
from shasta.reports.generator import save_markdown_report, save_html_report
from shasta.reports.pdf import save_pdf_report
db = ShastaDB(); db.initialize()
scan = db.get_latest_scan()
print(f'Generating reports from scan at {scan.completed_at}...')
md = save_markdown_report(scan)
html = save_html_report(scan)
pdf = save_pdf_report(scan)
print(f'Markdown: {md}')
print(f'HTML: {html}')
print(f'PDF: {pdf}')
"
Or run fresh scan + generate:
<PYTHON_CMD> -c "
from shasta.config import get_aws_client
from shasta.scanner import run_full_scan
from shasta.reports.generator import save_markdown_report, save_html_report
from shasta.reports.pdf import save_pdf_report
from shasta.db.schema import ShastaDB
client = get_aws_client(); client.validate_credentials()
print('Running compliance scan...')
scan = run_full_scan(client)
db = ShastaDB(); db.initialize(); db.save_scan(scan)
print('Generating reports...')
md = save_markdown_report(scan); html = save_html_report(scan); pdf = save_pdf_report(scan)
print(f'Markdown: {md}'); print(f'HTML: {html}'); print(f'PDF: {pdf}')
"