菜单
Run a compliance audit against the compliance floor. Dispatches the compliance-auditor agent.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
Behavioral floor management. Propose changes, review proposals, apply approved changes, view status. Routes to COO as behavioral floor guardian.
Compliance program management. Propose changes, review proposals, apply approved changes, audit conformance, view change log.
Generic floor management. Routes to the declared guardian for any governance floor. Use /floor propose <floor-name> <change> to propose changes to any active floor.
Structured agent-to-agent handoff. Validates artifact, logs metrics event, dispatches receiving agent.
Run a retrospective for the last completed work item. Pulls DORA metrics, summarizes flow, captures keep/stop/start.
Interactive project setup: copy templates, configure fleet, define compliance floor, add first specialist agent.
| name | audit |
| description | Run a compliance audit against the compliance floor. Dispatches the compliance-auditor agent. |
| argument-hint | [item-id] [--scope full|diff] |
Dispatch a compliance audit against the rules in compliance-floor.md. The compliance-auditor agent is dispatched during Review (Phase 4) of the work item lifecycle, but this skill allows on-demand auditing at any point. See .claude/agents/compliance-auditor.md for the agent's mandate.
/audit -- Audit current changes against the compliance floor/audit 42 -- Audit a specific work item/audit --scope diff -- Audit only changed files (faster)/audit --scope full -- Full compliance floor auditParse arguments. Extract item ID (optional) and scope (default: diff).
Determine scope.
diff: Identify files changed since the last commit (or since item was promoted, if item ID provided).full: Audit the entire codebase against the compliance floor.Dispatch compliance-auditor agent. Send the agent with:
compliance-floor.mdPresent results. Show the audit output in the compliance-auditor's standard format:
## Compliance Audit: Item #<id>
### Rules Checked
| # | Rule | Status | Notes |
|---|------|--------|-------|
| 1 | <rule text> | PASS/FAIL/WARN | <details> |
### Violations
#### [BLOCKING] <rule> — <location>
- **What:** <description>
- **Fix:** <recommendation>
### Summary
- Rules checked: X
- Passed: X
- Violations: X (Y blocking, Z warning)
- Verdict: PASS / FAIL (blocks deploy)
If violations found. For each blocking violation, recommend which domain owner should fix it. Log findings for patterns (e.g., the same rule violated repeatedly).
| Subcommand | Model | Rationale |
|---|---|---|
/audit | Sonnet | The compliance-auditor agent is already Sonnet; this dispatches it |
Implementers add domain-specific audit rules by defining them in compliance-floor.md. For deeper integration (e.g., automated SAST scans, policy-as-code), override this skill to run additional checks alongside the compliance-auditor agent.