Menü
Collect and store point-in-time compliance evidence snapshots for audit trail.
Mit Codex oder Claude installieren Kopieren Sie diesen Prompt, fügen Sie ihn in Codex, Claude oder einen anderen Assistant ein und lassen Sie die Skill-Seite prüfen und installieren.
Basierend auf der SOC-Berufsklassifikation
Deep code scan for AI security issues — prompt injection, PII in prompts, hardcoded keys, unguarded agents.
Run AI governance checks across cloud accounts and code repos — ISO 42001, EU AI Act, NIST AI RMF compliance.
Scan cloud accounts and GitHub repos to discover AI/ML services and build an AI system inventory.
Walk staged changes against the engineering principles checklist and report pass/fail per principle. Run before any non-trivial commit. Catches doc drift, stub functions, single-region defaults, missing framework mappings, and other regressions before they ship.
Generate a public-facing security trust page from scan data. Produces a single deployable index.html that shows compliance framework scores, security policies, infrastructure overview, and data protection posture. Deployable to S3, Vercel, Netlify, or GitHub Pages.
Paste a vendor's domain. Get a security risk assessment in 60 seconds.
| name | evidence |
| description | Collect and store point-in-time compliance evidence snapshots for audit trail. |
| user-invocable | true |
Collect timestamped compliance evidence snapshots for SOC 2 audit trail.
Read shasta.config.json for python_cmd. Use that for all commands (shown as <PYTHON_CMD>).
Run scan and collect evidence:
<PYTHON_CMD> -c "
import json
from shasta.config import get_aws_client
from shasta.scanner import run_full_scan
from shasta.evidence.collector import collect_all_evidence
from shasta.db.schema import ShastaDB
client = get_aws_client()
client.validate_credentials()
print('Running compliance scan...')
scan = run_full_scan(client)
db = ShastaDB(); db.initialize(); db.save_scan(scan)
print('Collecting evidence...')
files = collect_all_evidence(client, scan.id)
print(json.dumps({
'scan_id': scan.id,
'evidence_files': [str(f) for f in files],
'total_artifacts': len(files),
}, indent=2))
"
Explain what was collected (9 artifact types) and why monthly evidence collection builds the audit trail auditors need.