Menu
Collect and store point-in-time compliance evidence snapshots for audit trail.
Instalar com Codex ou Claude Copie este prompt, cole no Codex, Claude ou outro assistente e deixe que ele revise a página da skill e instale para você.
Baseado na classificação ocupacional SOC
Deep code scan for AI security issues — prompt injection, PII in prompts, hardcoded keys, unguarded agents.
Run AI governance checks across cloud accounts and code repos — ISO 42001, EU AI Act, NIST AI RMF compliance.
Scan cloud accounts and GitHub repos to discover AI/ML services and build an AI system inventory.
Walk staged changes against the engineering principles checklist and report pass/fail per principle. Run before any non-trivial commit. Catches doc drift, stub functions, single-region defaults, missing framework mappings, and other regressions before they ship.
Generate a public-facing security trust page from scan data. Produces a single deployable index.html that shows compliance framework scores, security policies, infrastructure overview, and data protection posture. Deployable to S3, Vercel, Netlify, or GitHub Pages.
Paste a vendor's domain. Get a security risk assessment in 60 seconds.
| name | evidence |
| description | Collect and store point-in-time compliance evidence snapshots for audit trail. |
| user-invocable | true |
Collect timestamped compliance evidence snapshots for SOC 2 audit trail.
Read shasta.config.json for python_cmd. Use that for all commands (shown as <PYTHON_CMD>).
Run scan and collect evidence:
<PYTHON_CMD> -c "
import json
from shasta.config import get_aws_client
from shasta.scanner import run_full_scan
from shasta.evidence.collector import collect_all_evidence
from shasta.db.schema import ShastaDB
client = get_aws_client()
client.validate_credentials()
print('Running compliance scan...')
scan = run_full_scan(client)
db = ShastaDB(); db.initialize(); db.save_scan(scan)
print('Collecting evidence...')
files = collect_all_evidence(client, scan.id)
print(json.dumps({
'scan_id': scan.id,
'evidence_files': [str(f) for f in files],
'total_artifacts': len(files),
}, indent=2))
"
Explain what was collected (9 artifact types) and why monthly evidence collection builds the audit trail auditors need.