a5c-ai Compliance Checker Skill
Overview
Checks compliance with SOC 2, GDPR, HIPAA, and PCI-DSS standards by analyzing code, configuration, and infrastructure for regulatory requirements.
Capabilities
- SOC 2 compliance checking
- GDPR requirement validation
- HIPAA compliance assessment
- PCI-DSS validation
- Custom compliance framework support
- Evidence collection
- Gap analysis reporting
- Remediation guidance
Target Processes
- security-architecture-review
- iac-review
- data-architecture-design
Input Schema
{
"type": "object",
"required": ["frameworks", "targets"],
"properties": {
"frameworks": {
"type": "array",
"items": {
"type": "string",
"enum": ["soc2", "gdpr", "hipaa", "pci-dss", "iso27001", "nist"]
}
},
"targets": {
"type": "object",
"properties": {
"code": { "type": "array" },
"infrastructure": { "type": "array" },
"documentation": { "type": "array" }
}
},
"options": {
"type": "object",
"properties": {
"scope": {
"type": "array",
"description": "Specific controls to check"
},
"collectEvidence": {
"type": "boolean",
"default": true
},
"outputFormat": {
"type": "string",
"enum": ["json", "markdown", "pdf"],
"default": "markdown"
}
}
}
}
}
Output Schema
{
"type": "object",
"properties": {
"frameworks": {
"type": "array",
"items": {
"type": "object",
"properties": {
"name": { "type": "string" },
"complianceScore": { "type": "number" },
"controls": {
"type": "array",
"items": {
"type": "object",
"properties": {
"id": { "type": "string" },
"name": { "type": "string" },
"status": { "type": "string" },
"findings": { "type": "array" },
"evidence": { "type": "array" }
}
}
}
}
}
},
"gaps": {
"type": "array",
"items": {
"type": "object",
"properties": {
"control": { "type": "string" },
"gap": { "type": "string" },
"remediation": { "type": "string" },
"priority": { "type": "string" }
}
}
},
"summary": {
"type": "object",
"properties": {
"overallScore": { "type": "number" },
"passedControls": { "type": "number" },
"failedControls": { "type": "number" },
"notApplicable": { "type": "number" }
}
}
}
}
Usage Example
{
kind: 'skill',
skill: {
name: 'compliance-checker',
context: {
frameworks: ['soc2', 'gdpr'],
targets: {
code: ['src/**/*.ts'],
infrastructure: ['terraform/**/*.tf'],
documentation: ['docs/security/**/*.md']
},
options: {
collectEvidence: true,
outputFormat: 'markdown'
}
}
}
}