菜单
Generic compliance audit context. Load before any task touching verification tiers, regulated forms, document uploads, identity verification, or anything involving user identity. Also load before any task that might accidentally reintroduce payment processing or regulated contract functionality.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
Builds production-grade Claude Projects and CustomGPTs, improves AI output quality using meta-thinking prompts, and architects self-improving AI systems. Use proactively when a founder wants to build a reliable AI workflow, automate a repeatable task with AI, improve the quality of AI outputs they're getting, feels stuck with generic AI responses, or wants to build internal tools powered by Claude. Trigger for "build a Claude project", "my AI outputs are generic", "how do I make Claude more specific", "build an AI workflow", "automate this with AI", or "my prompts aren't working".
One-command review pipeline. Chains CEO review → design review → eng review automatically. Surfaces only taste decisions for PD approval. Everything else runs autonomously.
Performance baseline measurement. Captures page load times, Core Web Vitals, and resource sizes. Compare before/after on every PR.
Playbook for bootstrapped and early-stage SaaS founders based on proven case studies ($0 to $5M ARR with 6 people, and creator-to-business flywheel models). Use proactively when a founder is bootstrapped or capital-efficient, needs to grow without paid acquisition, is facing a churn crisis, wants to build a freemium or usage-based model, or asks "how do I grow without VC money". Also trigger for "PLG", "inbound-led outbound", "creator-led growth", "build in public", or "how did [bootstrapped company] grow".
Real browser automation for testing, QA, and demo verification. Provides Playwright-based browser control for navigating the live app, clicking elements, filling forms, taking screenshots, and verifying visual state.
Post-deploy monitoring. After release-engineer pushes to production, canary watches the live site for errors, performance regressions, and page failures.
| name | compliance-audit |
| description | Generic compliance audit context. Load before any task touching verification tiers, regulated forms, document uploads, identity verification, or anything involving user identity. Also load before any task that might accidentally reintroduce payment processing or regulated contract functionality. |
| allowed-tools | Read, Grep |
Replace these placeholders with your project's forbidden files:
[FORBIDDEN_FILE_1] — e.g. payment processing service[FORBIDDEN_FILE_2] — e.g. regulated contract page[FORBIDDEN_ROUTE_1] — e.g. /contract routeAdapt these to your regulated domain:
Replace with your project's access tier structure:
[TIER_0]: Unverified — browse only[TIER_1]: Basic verified — core actions (view/chat/request)[TIER_2]: Fully verified — full access via approved identity OAuthAdapt to your jurisdiction's PII requirements:
[PII_FIELD_1] (e.g. National ID): always mask in UI — show partial format only[PII_FIELD_2] (e.g. Passport number): always mask — first 2 chars + **** + last 1[PII_FIELD_3] (e.g. OAuth token ID): always maskRun: npx tsc --noEmit (or equivalent for your stack) Zero type errors required before considering task complete.
Replace this section with your project's regulated domain rules: