메뉴
Run a compliance audit against the compliance floor. Dispatches the compliance-auditor agent.
Codex 또는 Claude로 설치 이 Prompt를 복사해 Codex, Claude 또는 다른 어시스턴트에 붙여 넣으면 Skill 페이지를 검토하고 설치를 진행할 수 있습니다.
SOC 직업 분류 기준
Behavioral floor management. Propose changes, review proposals, apply approved changes, view status. Routes to COO as behavioral floor guardian.
Compliance program management. Propose changes, review proposals, apply approved changes, audit conformance, view change log.
Generic floor management. Routes to the declared guardian for any governance floor. Use /floor propose <floor-name> <change> to propose changes to any active floor.
Structured agent-to-agent handoff. Validates artifact, logs metrics event, dispatches receiving agent.
Run a retrospective for the last completed work item. Pulls DORA metrics, summarizes flow, captures keep/stop/start.
Interactive project setup: copy templates, configure fleet, define compliance floor, add first specialist agent.
| name | audit |
| description | Run a compliance audit against the compliance floor. Dispatches the compliance-auditor agent. |
| argument-hint | [item-id] [--scope full|diff] |
Dispatch a compliance audit against the rules in compliance-floor.md. The compliance-auditor agent is dispatched during Review (Phase 4) of the work item lifecycle, but this skill allows on-demand auditing at any point. See .claude/agents/compliance-auditor.md for the agent's mandate.
/audit -- Audit current changes against the compliance floor/audit 42 -- Audit a specific work item/audit --scope diff -- Audit only changed files (faster)/audit --scope full -- Full compliance floor auditParse arguments. Extract item ID (optional) and scope (default: diff).
Determine scope.
diff: Identify files changed since the last commit (or since item was promoted, if item ID provided).full: Audit the entire codebase against the compliance floor.Dispatch compliance-auditor agent. Send the agent with:
compliance-floor.mdPresent results. Show the audit output in the compliance-auditor's standard format:
## Compliance Audit: Item #<id>
### Rules Checked
| # | Rule | Status | Notes |
|---|------|--------|-------|
| 1 | <rule text> | PASS/FAIL/WARN | <details> |
### Violations
#### [BLOCKING] <rule> — <location>
- **What:** <description>
- **Fix:** <recommendation>
### Summary
- Rules checked: X
- Passed: X
- Violations: X (Y blocking, Z warning)
- Verdict: PASS / FAIL (blocks deploy)
If violations found. For each blocking violation, recommend which domain owner should fix it. Log findings for patterns (e.g., the same rule violated repeatedly).
| Subcommand | Model | Rationale |
|---|---|---|
/audit | Sonnet | The compliance-auditor agent is already Sonnet; this dispatches it |
Implementers add domain-specific audit rules by defining them in compliance-floor.md. For deeper integration (e.g., automated SAST scans, policy-as-code), override this skill to run additional checks alongside the compliance-auditor agent.