domain-audit

name	domain-audit
description	Audit a session against its domain pack, especially the regulated and operations-heavy packs such as HR, legal, marketing, sales, real-estate, government, insurance, logistics, manufacturing, e-commerce, and nonprofit. Use this when domain-specific policy needs a manual pass.
when_to_use	Activate before handling data in regulated or sensitive domains, or when the user asks about HR policy, legal compliance, GDPR, healthcare, finance, or any industry-specific governance requirements.
argument-hint	[domain or data type to audit]
license	Apache-2.0
compatibility	["codex","claude-standalone","claude-plugin","copilot-plugin","github-repo","open-standard","cline-native","cursor-native","windsurf-native","continue-native","letta-code-native","pi-native","roo-native","goose-native","opencode-native","gemini-cli-native","kiro-native","kilo-native","amp-native","augment-native","hermes-native","multica-native","openclaw-native","devin-terminal-native","warp-native","droid-bundle","forge-acp"]
metadata	{"author":"controlkeel","version":"2.0","category":"domain","ck_mcp_tools":["ck_context","ck_finding"]}

Domain Audit Skill

Use this skill when the session’s domain pack drives the real risk more than generic software checks.

Focus areas

• HR: bias, candidate data, compensation visibility
• Legal: privilege, retention, document handling
• Marketing: consent, unsubscribe, analytics PII
• Sales: CRM data, contact deletion, revenue visibility
• Real estate: fair-housing logic, tenant PII, retention
• Government: records retention, constituent data, approval chains
• Insurance: claims fairness, medical-adjacent privacy, denial review
• E-commerce: card scope, refunds, fraud controls
• Logistics: shipment custody, dispatch safety, carrier data
• Manufacturing: QA holds, traceability, plant safety
• Nonprofit: donor privacy, grant restrictions, beneficiary exports

Additional resources

• Domain review matrix