audit-report

name	audit-report
description	Generate an audit-ready compliance report grouped by SOC2 and HIPAA controls
user_invocable	true
argument_description	Optional: --framework soc2|hipaa to limit report scope

/audit-report

Generate a comprehensive audit report with evidence.

Instructions

Use the Agent tool to spawn the auditor agent:

• subagent_type: auditor
• Pass $ARGUMENTS to the agent prompt

Example agent prompt:

Generate an audit report for compliance findings. Arguments: $ARGUMENTS

If --framework is specified, only include that framework.
Otherwise, generate a combined SOC2 + HIPAA report.

Usage Examples

/audit-report                   # Full SOC2 + HIPAA report
/audit-report --framework soc2  # SOC2 only
/audit-report --framework hipaa # HIPAA only

Output

The auditor will:

1. Read all findings and evidence files
2. Group by framework controls
3. Generate a markdown report at .compliance/reports/audit-{timestamp}.md
4. Report the compliance score and file path