Exécutez n'importe quel Skill dans Manus
en un clic

Exécutez n'importe quel Skill dans Manus en un clic

Commencer

audit-pipeline

Étoiles1

Forks8

Mis à jour20 juillet 2026 à 16:26

Use when user wants to build Gemara Policy artifacts for audit preparation or compliance program setup

Installation

Installer avec Codex ou Claude Copiez ce prompt, collez-le dans Codex, Claude ou un autre assistant, puis laissez-le vérifier la page du skill et l'installer pour vous.

Exécuter dans Manus

Source

complytime

complytime/complypack

Ouvrir le dépôt GitHub Voir les dépôts du créateur

Téléchargement

Exécuter dans Manus

Métiers associésSOC

Basé sur la classification professionnelle SOC

Agents de conformitéProfessions des affaires et des opérations financières·SOC 13-1041

Explorateur de fichiers

5 fichiers

SKILL.md

readonly

name	audit-pipeline
description	Use when user wants to build Gemara Policy artifacts for audit preparation or compliance program setup

/comply:audit-pipeline — ComplyTime Audit Pipeline

Guide users through building a Gemara Policy (applicability statement) from their system architecture and governance sources. The Gemara Policy is the formal contract between audit and engineering, functionally equivalent to an ISO 27001 Statement of Applicability or a NIST System Security Plan.

Safety

CRITICAL: Every stage MUST read control IDs, requirement IDs, and parameter values from MCP resources. DO NOT generate these from memory. The MCP server is the source of truth.

Pipeline Stages

Stage	Artifact	Purpose
scoping	`.complytime/scoping.yaml`	System profile + Control Catalog scoping + gap analysis
mapping	`.complytime/delta-report.yaml`	Parameter delta analysis + harmonization across framework layers
adherence	`.complytime/child-policy.yaml`	Compile the child Policy with adherence plan

After adherence, invoke /comply:build-assessment to generate assessment logic for use with complyctl.

Router Logic

Check if .complytime/ directory exists and which artifacts are present
Determine pipeline state:
- No .complytime/ directory → start at scoping
- scoping.yaml exists but no delta-report.yaml → offer mapping
- delta-report.yaml exists but no child-policy.yaml → offer adherence
- child-policy.yaml exists → pipeline complete, offer to re-run any stage or proceed to /comply:build-assessment
If the user specified a stage, validate prerequisites:
- mapping requires scoping.yaml
- adherence requires delta-report.yaml
Dispatch to the appropriate stage skill

Dispatching

Read the stage instructions from this skill's base directory before proceeding:

scoping → scoping.md
mapping → mapping.md
adherence → adherence.md

Supporting Files

policy-validation-rubric.md — Structural validation rubric for compiled Policy YAML (consumed by Step 6a of adherence)

Status Display

/comply:audit-pipeline status:
  [done] scoping     — .complytime/scoping.yaml
  [done] mapping     — .complytime/delta-report.yaml
  [next] adherence   — not yet run

Plus depuis ce dépôt

même dépôt

build-assessment

complytime/complypack

Use when user mentions Rego, Conftest, OPA, "generate policy", or "assessment logic" in the context of Gemara catalogs. Generates Rego policies from Gemara Control Catalogs for Kubernetes (Deployments, Pods, DaemonSets, StatefulSets, CronJobs, Jobs, Services, NetworkPolicies, Ingress, RBAC, ConfigMaps, Secrets), CI/CD pipelines (GitHub Actions, GitLab CI, Azure Pipelines), Conftest, or OPA. Accepts mode argument: "single" (default, one requirement at a time) or "batch" (all at once)

2026-07-241

setup

complytime/complypack

Set up complypack for this project — generate complypack.yaml, warm the artifact cache, and optionally configure MCP integration

2026-07-221

using-complypack

complytime/complypack

Use when starting any compliance task — establishes skill ordering and MCP grounding requirements before any other complypack skill runs

2026-07-171

test-driven-assessment

complytime/complypack

Use before generating any Rego policy or assessment logic — generates human-reviewable test cases from assessment requirements before any policy is written

2026-07-151

pack-assessment

complytime/complypack

Use when user mentions Rego, Conftest, OPA, AMPEL, "generate policy", or "assessment logic" in the context of Gemara catalogs. Generates policies from Gemara Control Catalogs for Kubernetes (Deployments, Pods, DaemonSets, StatefulSets, CronJobs, Jobs, Services, NetworkPolicies, Ingress, RBAC, ConfigMaps, Secrets), CI/CD pipelines (GitHub Actions, GitLab CI, Azure Pipelines), Conftest, OPA, or AMPEL

2026-07-151

/comply:audit-pipeline — ComplyTime Audit Pipeline

Safety

CRITICAL: Every stage MUST read control IDs, requirement IDs, and parameter values from MCP resources. DO NOT generate these from memory. The MCP server is the source of truth.

Pipeline Stages

Stage

Artifact

Purpose

scoping

.complytime/scoping.yaml

System profile + Control Catalog scoping + gap analysis

mapping

.complytime/delta-report.yaml

Parameter delta analysis + harmonization across framework layers

adherence

.complytime/child-policy.yaml

Compile the child Policy with adherence plan

After adherence, invoke /comply:build-assessment to generate assessment logic for use with complyctl.

Router Logic

Check if .complytime/ directory exists and which artifacts are present

Determine pipeline state:

No .complytime/ directory → start at scoping
scoping.yaml exists but no delta-report.yaml → offer mapping
delta-report.yaml exists but no child-policy.yaml → offer adherence
child-policy.yaml exists → pipeline complete, offer to re-run any stage or proceed to /comply:build-assessment

If the user specified a stage, validate prerequisites:

mapping requires scoping.yaml
adherence requires delta-report.yaml

Dispatch to the appropriate stage skill

Dispatching

Read the stage instructions from this skill's base directory before proceeding:

scoping → scoping.md

mapping → mapping.md

adherence → adherence.md

Supporting Files

policy-validation-rubric.md — Structural validation rubric for compiled Policy YAML (consumed by Step 6a of adherence)

Status Display

/comply:audit-pipeline status: [done] scoping — .complytime/scoping.yaml [done] mapping — .complytime/delta-report.yaml [next] adherence — not yet run