一键导入
report
Generate professional compliance reports (Markdown, HTML, PDF) from the latest scan data.
用 Codex 或 Claude 帮你安装 复制这段 Prompt,粘贴到 Codex、Claude 或其他助手里,让它检查 Skill 页面并帮你完成安装。
菜单
Generate professional compliance reports (Markdown, HTML, PDF) from the latest scan data.
用 Codex 或 Claude 帮你安装 复制这段 Prompt,粘贴到 Codex、Claude 或其他助手里,让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
Deep code scan for AI security issues — prompt injection, PII in prompts, hardcoded keys, unguarded agents.
Run AI governance checks across cloud accounts and code repos — ISO 42001, EU AI Act, NIST AI RMF compliance.
Scan cloud accounts and GitHub repos to discover AI/ML services and build an AI system inventory.
Walk staged changes against the engineering principles checklist and report pass/fail per principle. Run before any non-trivial commit. Catches doc drift, stub functions, single-region defaults, missing framework mappings, and other regressions before they ship.
Generate a public-facing security trust page from scan data. Produces a single deployable index.html that shows compliance framework scores, security policies, infrastructure overview, and data protection posture. Deployable to S3, Vercel, Netlify, or GitHub Pages.
Paste a vendor's domain. Get a security risk assessment in 60 seconds.
| name | report |
| description | Generate professional compliance reports (Markdown, HTML, PDF) from the latest scan data. |
| user-invocable | true |
Generate professional SOC 2 compliance reports.
Read shasta.config.json for python_cmd. Use that for all commands (shown as <PYTHON_CMD>).
<PYTHON_CMD> -c "
from shasta.db.schema import ShastaDB
db = ShastaDB(); db.initialize()
scan = db.get_recent_scan(max_age_minutes=60)
if scan:
print(f'RECENT_SCAN|{scan.id}|{scan.completed_at}|{len(scan.findings)} findings')
else:
print('NO_RECENT_SCAN')
"
If recent scan exists, ask user: "Generate reports from scan at , or run a fresh scan first?"
Using recent scan:
<PYTHON_CMD> -c "
from shasta.db.schema import ShastaDB
from shasta.reports.generator import save_markdown_report, save_html_report
from shasta.reports.pdf import save_pdf_report
db = ShastaDB(); db.initialize()
scan = db.get_latest_scan()
print(f'Generating reports from scan at {scan.completed_at}...')
md = save_markdown_report(scan)
html = save_html_report(scan)
pdf = save_pdf_report(scan)
print(f'Markdown: {md}')
print(f'HTML: {html}')
print(f'PDF: {pdf}')
"
Or run fresh scan + generate:
<PYTHON_CMD> -c "
from shasta.config import get_aws_client
from shasta.scanner import run_full_scan
from shasta.reports.generator import save_markdown_report, save_html_report
from shasta.reports.pdf import save_pdf_report
from shasta.db.schema import ShastaDB
client = get_aws_client(); client.validate_credentials()
print('Running compliance scan...')
scan = run_full_scan(client)
db = ShastaDB(); db.initialize(); db.save_scan(scan)
print('Generating reports...')
md = save_markdown_report(scan); html = save_html_report(scan); pdf = save_pdf_report(scan)
print(f'Markdown: {md}'); print(f'HTML: {html}'); print(f'PDF: {pdf}')
"