菜单
Compliance, audit, risk, and policy management for ERPClaw. 38 actions across 4 domains -- audit plans and findings, risk register with heat-map scoring, internal controls and compliance calendar, policy lifecycle with employee acknowledgment tracking.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
CRM pipeline, advanced marketing, territory management, contract lifecycle, cross-module analytics, and AI-powered business analysis for ERPClaw. 137 actions across 4 domains: lead management, lead sources, opportunity pipeline, saved views, global search, CSV import/export, email campaigns, territories, contracts, automation, KPI dashboards, anomaly detection, cash flow forecasting, and relationship scoring.
Integration Connectors -- manage connector configs, field mappings, sync logs, webhook registrations, and platform-specific connectors for booking, delivery, real estate, financial, and productivity platforms. 80 actions across 9 domains. Framework only -- actual API calls happen at runtime through connector config.
Deep Shopify integration -- 66 actions across 15 domains. Order sync, payout reconciliation, GL posting, COGS tracking, gift card deferred revenue, App Store OAuth pairing, status mirror, SSE command delivery, cross-platform push daemon, GDPR webhooks, browse, and reports.
Deep Stripe integration -- 68 actions across 10 domains. Account management, transaction sync, customer mapping, GL posting with rule engine, payout reconciliation, ASC 606 revenue recognition, Connect platform fees, webhook processing, and financial reports.
Operations suite for ERPClaw. Manufacturing (BOMs, work orders, MRP), advanced manufacturing (shop floor, tools, ECOs, recipes), projects (tasks, milestones, timesheets), fixed assets (depreciation, disposal), quality (inspections, NCRs), and support (issues, SLAs, warranty). 135 actions across 6 domains with immutable audit trail.
Developer tooling for authoring ERPClaw vertical modules and inspecting OS-level health. Module scaffolding, in-module feature injection, sandboxed test execution, deploy pipeline, variant analysis, gap detection, semantic checks, compliance + heartbeat reports. 33 actions, all os-prefixed. Sandbox-first generation; user approval required before deploy. Optional addon, not installed by default. Foundation skill erpclaw is required (>= v4.0.0).
| name | erpclaw-compliance |
| version | 1.0.0 |
| description | Compliance, audit, risk, and policy management for ERPClaw. 38 actions across 4 domains -- audit plans and findings, risk register with heat-map scoring, internal controls and compliance calendar, policy lifecycle with employee acknowledgment tracking. |
| author | AvanSaber |
| homepage | https://github.com/avansaber/erpclaw-addons |
| source | https://github.com/avansaber/erpclaw-addons |
| tier | 5 |
| category | infrastructure |
| requires | ["erpclaw"] |
| database | ~/.openclaw/erpclaw/data.sqlite |
| user-invocable | true |
| tags | ["compliance","audit","risk","controls","policy","governance","sox","internal-audit","risk-register","compliance-calendar"] |
| scripts | ["scripts/db_query.py"] |
| metadata | {"openclaw":{"type":"executable","install":{"post":"python3 scripts/db_query.py --action status"},"requires":{"bins":["python3"],"env":[],"optionalEnv":["ERPCLAW_DB_PATH"]},"os":["darwin","linux"]}} |
You are a Compliance Manager for ERPClaw Compliance, handling audit planning, risk management, internal controls testing, compliance calendar tracking, and policy lifecycle management. You manage audit plans with findings and remediation, maintain a scored risk register with likelihood/impact matrices, schedule and execute control tests, track compliance deadlines, and manage policy documents with employee acknowledgment workflows.
~/.openclaw/erpclaw/data.sqliteActivate this skill when the user mentions: audit, compliance, risk, control, policy, governance, SOX, internal audit, risk register, risk matrix, finding, remediation, control test, compliance calendar, filing deadline, policy acknowledgment, risk assessment.
If the database does not exist or you see "no such table" errors:
python3 {baseDir}/../erpclaw/scripts/erpclaw-setup/db_query.py --action initialize-database
python3 {baseDir}/init_db.py
python3 {baseDir}/scripts/db_query.py --action status
1. Create an audit plan:
--action compliance-add-audit-plan --company-id {id} --name "Q1 Internal Audit" --audit-type internal --scope "Financial controls" --planned-start "2026-04-01" --planned-end "2026-04-30"
2. Register a risk:
--action compliance-add-risk --company-id {id} --name "Data breach risk" --category technology --likelihood 3 --impact 4 --mitigation-plan "Implement MFA and encryption"
3. Schedule a control test:
--action compliance-add-control-test --company-id {id} --control-name "Segregation of Duties" --control-type preventive --frequency quarterly --test-procedure "Review access logs"
4. Track a compliance deadline:
--action compliance-add-calendar-item --company-id {id} --title "Annual SOX Filing" --compliance-type filing --due-date "2026-06-30" --responsible "CFO"
5. Publish a policy:
--action compliance-add-policy --company-id {id} --title "Anti-Bribery Policy" --policy-type compliance --content "..." --requires-acknowledgment 1
--action compliance-publish-policy --policy-id {id}
For all actions: python3 {baseDir}/scripts/db_query.py --action <action> [flags]
| Action | Required Flags | Optional Flags |
|---|---|---|
compliance-add-audit-plan | --company-id --name --audit-type | --scope --lead-auditor --planned-start --planned-end --notes |
compliance-update-audit-plan | --audit-plan-id | --name --scope --lead-auditor --planned-start --planned-end --notes |
compliance-get-audit-plan | --audit-plan-id | |
compliance-list-audit-plans | --company-id --status --search --limit --offset | |
compliance-start-audit | --audit-plan-id | |
compliance-complete-audit | --audit-plan-id | |
compliance-add-audit-finding | --audit-plan-id --company-id --title --finding-type | --description --area --root-cause --recommendation --remediation-due --assigned-to --notes |
compliance-list-audit-findings | --audit-plan-id --company-id --finding-type --remediation-status --limit --offset |
| Action | Required Flags | Optional Flags |
|---|---|---|
compliance-add-risk | --company-id --name --category --likelihood --impact | --description --owner --mitigation-plan --review-date --notes |
compliance-update-risk | --risk-id | --name --category --likelihood --impact --owner --mitigation-plan --residual-likelihood --residual-impact --review-date --status --notes |
compliance-get-risk | --risk-id | |
compliance-list-risks | --company-id --category --status --risk-level --search --limit --offset | |
compliance-add-risk-assessment | --risk-id --company-id --likelihood --impact | --assessor --notes |
compliance-list-risk-assessments | --risk-id --limit --offset | |
compliance-risk-matrix-report | --company-id | |
compliance-close-risk | --risk-id |
| Action | Required Flags | Optional Flags |
|---|---|---|
compliance-add-control-test | --company-id --control-name --control-type | --control-description --frequency --test-procedure --test-date --tester --evidence --next-test-date --notes |
compliance-update-control-test | --control-test-id | --control-name --control-description --control-type --frequency --test-procedure --tester --evidence --next-test-date --notes |
compliance-get-control-test | --control-test-id | |
compliance-list-control-tests | --company-id --control-type --test-result --frequency --search --limit --offset | |
compliance-execute-control-test | --control-test-id --test-result | --tester --evidence --notes |
compliance-add-calendar-item | --company-id --title --compliance-type --due-date | --reminder-days --responsible --description --recurrence --notes |
compliance-update-calendar-item | --calendar-item-id | --title --compliance-type --due-date --reminder-days --responsible --description --recurrence --notes |
compliance-get-calendar-item | --calendar-item-id | |
compliance-list-calendar-items | --company-id --compliance-type --status --search --limit --offset | |
compliance-complete-calendar-item | --calendar-item-id | |
compliance-overdue-items-report | --company-id | |
compliance-dashboard | --company-id |
| Action | Required Flags | Optional Flags |
|---|---|---|
compliance-add-policy | --company-id --title --policy-type | --version --content --effective-date --review-date --owner --requires-acknowledgment --notes |
compliance-update-policy | --policy-id | --title --policy-type --version --content --review-date --owner --requires-acknowledgment --notes |
compliance-get-policy | --policy-id | |
compliance-list-policies | --company-id --policy-type --status --search --limit --offset | |
compliance-publish-policy | --policy-id | --effective-date |
compliance-retire-policy | --policy-id | |
compliance-add-policy-acknowledgment | --policy-id --company-id --employee-name | --employee-id --ip-address --notes |
compliance-list-policy-acknowledgments | --policy-id --employee-id --limit --offset | |
compliance-policy-compliance-report | --company-id | |
status |
Tables owned (8): audit_plan, audit_finding, risk_register, risk_assessment, control_test, compliance_calendar, policy, policy_acknowledgment
Script: scripts/db_query.py routes to 4 domain modules: audit.py, risk.py, controls.py, policy.py
Data conventions: IDs = TEXT (UUID4), Dates = TEXT (ISO 8601), Booleans = INTEGER (0/1)
Risk scoring: risk_score = likelihood * impact, risk_level auto-set: 1-4=low, 5-9=medium, 10-15=high, 16-25=critical
Shared library: erpclaw_lib (get_connection, ok/err, row_to_dict, get_next_name, audit, check_required_tables)