メニュー
Validates AWS readiness for website deployment. Checks CLI tools, credentials, SES, Route 53, and ACM. Produces a report with pass/fail and action items.
Codex または Claude でインストール この Prompt をコピーして Codex、Claude、または他のアシスタントに貼り付けると、Skill ページを確認してインストールできます。
SOC 職業分類に基づく
Build and deploy a production-ready Trust Center for any company. Use this skill whenever someone asks to create a trust center, compliance portal, security page, or wants to publish their SOC 2/SOC 3/ISO 27001/HIPAA/compliance posture publicly. Also triggers when someone mentions gated document access for audit reports, NDA-based document sharing, or wants to replace paid trust center tools like Secureframe, Vanta, Drata, or SafeBase. Even if they just say "I need a place to share my SOC 2 with customers" — that's a trust center. Use this skill.
NIST Cybersecurity Framework v2.0 expert. Reference-depth knowledge of the six Functions (Govern, Identify, Protect, Detect, Respond, Recover), Categories and Subcategories, Profiles (Current vs Target), Tiers, Implementation Examples, and the practitioner workflow of using CSF as a board-readable cybersecurity outcomes language. Backed by the SCF crosswalk for control-by-control mechanics.
Verbatim reference for all 320 NIST 800-171A Rev 2 assessment objectives, plus the Rev 2 → Rev 3 control crosswalk. Use for AO-level lookups (e.g., 3.1.1[c]), evidence planning, and forward-mapping to Rev 3. Pairs with cmmc-expert.
CMMC v2.0 expert for DoD contractors. Covers NIST 800-171 Rev 2 (14 families, 110 controls), SPRS scoring, POA&M rules, 32 CFR Part 170, DFARS clauses, scoping, ESP/CSP, C3PAO assessment lifecycle, and Rev 2 → Rev 3 transition.
Interpret testssl-inspector normalized findings, recommend remediations, and tie evidence back to SCF anchor controls plus SOC 2 / NIST 800-53 r5 / PCI DSS 4.0.1 / ISO 27002:2022 equivalents derived from SCF crosswalks.
Scaffolds a complete React/Vite website project from site-config.json. Generates components, styles, and configuration based on the site type and plan data.
| name | website-preflight |
| description | Validates AWS readiness for website deployment. Checks CLI tools, credentials, SES, Route 53, and ACM. Produces a report with pass/fail and action items. |
| allowed-tools | Bash, Read, Write, Edit, Glob |
You are running the /grc-portfolio:preflight skill. Your job is to validate that all prerequisites are met for deploying a website to AWS, and guide the user through any human tasks required.
Find site-config.json:
$ARGUMENTS for a project directory pathRead it to understand what features are enabled and what AWS configuration is needed.
Run each check and record the result as PASS or FAIL:
AWS CLI installed
aws --version
If missing: suggest running $TOOLKIT_DIR/scripts/bootstrap.sh
Node.js installed (v18+)
node --version
npm installed
npm --version
AWS credentials configured
aws sts get-caller-identity --profile <aws.profile>
Record the account ID and ARN for the report.
AWS region set to us-east-1
Verify aws.region in config is us-east-1 (required for CloudFront + ACM).
CloudFormation templates valid
Run $TOOLKIT_DIR/scripts/validate-stack.sh against the appropriate template:
features.customDomain: validate $TOOLKIT_DIR/cloudformation/website-infrastructure.yaml$TOOLKIT_DIR/cloudformation/website-infrastructure-no-domain.yamlSES email verified (if features.contactForm)
aws ses get-identity-verification-attributes --identities <client.email> --profile <aws.profile> --region us-east-1
Check that the status is "Success".
Route 53 hosted zone exists (if features.customDomain)
aws route53 list-hosted-zones-by-name --dns-name <aws.domain> --profile <aws.profile>
If found, save the hosted zone ID to aws.hostedZoneId in config.
ACM certificate exists in us-east-1 (if features.customDomain)
aws acm list-certificates --region us-east-1 --profile <aws.profile> --query "CertificateSummaryList[?DomainName=='<aws.domain>']"
If found and status is "ISSUED", save the ARN to aws.certArn in config.
gh CLI installed (for future /grc-portfolio:repo and /grc-portfolio:cicd steps)
gh --version
Output a formatted report with three sections:
List all checks that passed with a checkmark.
Things that can be fixed automatically -- offer to run the fix:
Things the user must do manually. For each, provide:
Common human tasks:
brew install gh && gh auth loginIf there are human action items, tell the user to complete them and then say "ready" or "done" to re-run the checks.
When they indicate completion, re-run only the previously-failed checks.
Once all checks pass:
aws.hostedZoneId if discoveredaws.certArn if discoveredstatus.preflightComplete = truesite-config.jsonTell the user:
/grc-portfolio:build next (if not done) or /grc-portfolio:infra to deploy infrastructure$TOOLKIT_DIR = read from site-config.json toolkitDir field$ARGUMENTS = arguments passed after /grc-portfolio:preflight (expected: project directory path)