メニュー
Surface-level compliance risk assessment for Make.com scenarios. Checks GDPR, Quebec Law 25, PCI-DSS, and HIPAA. NOT legal advice — flags risks for human review.
デフォルトでは、最初にソースを確認する Prompt が選択されています。直接コマンドに切り替えるか、ローカルコピーをダウンロードすることもできます。
インストールを決める前に、SKILL.md と SkillsMP に表示されている付属ファイルをお読みください。
Codex または Claude でインストール この Prompt をコピーして Codex、Claude、または他のアシスタントに貼り付けると、Skill ページを確認してインストールできます。
直接コマンドでは確認用 Prompt が省略されます。実行前にソースを確認してください。
npx skills add https://github.com/cardinalconseils/make-automation-specialist --skill compliance-scannerコマンドは1行のまま表示されます。コピー前に横へスクロールして全体を確認してください。
ローカルで確認しますか？SkillsMP が現在取得できるファイルをダウンロードできます。
Designs AI agent architecture for Make.com scenarios. Determines model selection, tool inventory, memory strategy, looping pattern, and output contract. Called by scenario-orchestrator during System Design phase when ai_required is true, or directly by ai-agent-builder agent.
Pre-push blueprint JSON review for Make.com scenarios. Checks structural integrity, connection IDs, mapper references, filter logic, and error handler coverage before any scenario_update call.
Fetches exact Make.com module documentation before any blueprint is designed. Returns precise field names, required vs optional parameters, data types, and enumerated values. Eliminates improvisation and ensures first-shot accuracy.
SOC 職業分類に基づく
SKILL.md を表示中
| name | compliance-scanner |
| description | Surface-level compliance risk assessment for Make.com scenarios. Checks GDPR, Quebec Law 25, PCI-DSS, and HIPAA. NOT legal advice — flags risks for human review. |
Performs surface-level compliance risk assessment on Make.com scenarios. NOT legal advice. Flags risks for human review.
See frameworks.md for the full checklist for each framework (GDPR, Quebec Law 25, PCI-DSS, HIPAA).
## Compliance Surface Assessment
**Frameworks assessed:** {list}
**Assessment date:** {timestamp}
**Status:** {risks-found | clean}
### Risks Found
#### [RISK TITLE]
**Framework:** {GDPR / Quebec Law 25 / PCI-DSS / HIPAA}
**Severity:** {Critical / High / Medium / Low}
**Scenario:** {scenario name}
**Description:** {plain-language risk description}
**Recommendation:** {specific action to take}
**References:** {relevant article/section}
### Clean Areas
{What was assessed and found compliant}
---
**Disclaimer:** This assessment is a surface-level automated scan, not legal advice.
Consult a qualified privacy lawyer before making compliance decisions.
In Quebec: contact Commission d'accès à l'information for guidance.
In the EU: contact your Data Protection Officer (DPO) or national supervisory authority.
Critical: Likely violation in progress. Stop and fix before next run. Example: Payment card numbers flowing through Make.com logs.
High: Probable violation if not addressed within 30 days. Example: Personal data transferred to US service without standard contractual clauses.
Medium: Risk area — review and document mitigation. Example: No documented legal basis for processing marketing email data.
Low: Best practice not followed — low immediate risk. Example: No explicit data retention policy defined for this automation's data.
Save to .make/compliance/{timestamp}-{scenario-id}-compliance.md.
Append summary to workspace-level compliance overview at .make/compliance/overview.md.