How do I install the Code To Control Mapper skill?

Run npx skillmds@latest add aibot88/code-to-control-mapper in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

Is Code To Control Mapper safe to use?

This skill has not completed SkillMD's automated safety review yet. Independent scanners report: SkillSpector: PASS, Skill Scanner: PASS. Capability flags: docs only. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Code To Control Mapper?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Code To Control Mapper free to use?

Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.

Who published Code To Control Mapper?

aibot88 (@aibot88) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Code To Control Mapper by aibot88 — Agent Skill

Name: Code To Control Mapper
Rating: 4.666666666666667 (3 reviews)
Author: aibot88

Code To Control Mapper

Maps infrastructure code (Terraform, Kubernetes, CloudFormation) to compliance controls (ISO 27001, SOC 2, NIST 800-53). Analyzes IaC files and generates compliance evidence mappings showing which controls are satisfied.

aibot88 Updated Sep 9, 2026 3 repo stars

File contents

Code-to-Control Mapper

Maps infrastructure-as-code (IaC) files to specific compliance framework controls. Translates technical implementations into audit-ready compliance evidence.

Quick Commands

Map a Terraform file to SOC 2:

node plugins/grc-engineer/scripts/map-control.js main.tf SOC2

Map Kubernetes manifests to ISO 27001:

node plugins/grc-engineer/scripts/map-control.js k8s/deployment.yaml ISO27001

Map CloudFormation template to NIST 800-53:

node plugins/grc-engineer/scripts/map-control.js template.yaml NIST80053

Supported Frameworks

SOC2 - Service Organization Control 2 (CC6.1, CC7.2, etc.)
ISO27001 - ISO/IEC 27001 (Annex A controls)
NIST80053 - NIST Special Publication 800-53
PCIDSS - Payment Card Industry Data Security Standard
HIPAA - Health Insurance Portability and Accountability Act
GDPR - General Data Protection Regulation

Supported IaC Formats

Terraform (.tf, .tfvars)
Kubernetes (.yaml, .yml)
CloudFormation (.yaml, .json)
Ansible (.yml)
Pulumi (.ts, .js, .py)

Output Format

Generates markdown reports with:

Control ID and description
Evidence location (file:line)
Compliance status (Satisfied/Partial/Not Satisfied)
Recommendations for improvement

Example Output

# Compliance Mapping Report

## SOC 2 - CC6.1: Logical and Physical Access Controls

**Status:** ✅ Satisfied

**Evidence:**
- `main.tf:45` - `aws_db_instance` with `storage_encrypted = true`
- `main.tf:52` - IAM role with least privilege policy

**Mapping:** Data at rest encryption via AWS KMS satisfies encryption requirements.

Prerequisites

IaC file to analyze
Optional: Framework name (defaults to SOC2)

---name: code-to-control-mapperdescription: Maps infrastructure code (Terraform, Kubernetes, CloudFormation) to compliance controls (ISO 27001, SOC 2, NIST 800-53). Analyzes IaC files and generates compliance evidence mappings showing which controls are satisfied.--- # Code-to-Control Mapper Maps infrastructure-as-code (IaC) files to specific compliance framework controls. Translates technical implementations into audit-ready compliance evidence. ## Quick Commands **Map a Terraform file to SOC 2:** ```bash node plugins/grc-engineer/scripts/map-control.js main.tf SOC2 ``` **Map Kubernetes manifests to ISO 27001:** ```bash node plugins/grc-engineer/scripts/map-control.js k8s/deployment.yaml ISO27001 ``` **Map CloudFormation template to NIST 800-53:** ```bash node plugins/grc-engineer/scripts/map-control.js template.yaml NIST80053 ``` ## Supported Frameworks - **SOC2** - Service Organization Control 2 (CC6.1, CC7.2, etc.) - **ISO27001** - ISO/IEC 27001 (Annex A controls) - **NIST80053** - NIST Special Publication 800-53 - **PCIDSS** - Payment Card Industry Data Security Standard - **HIPAA** - Health Insurance Portability and Accountability Act - **GDPR** - General Data Protection Regulation ## Supported IaC Formats - **Terraform** (.tf, .tfvars) - **Kubernetes** (.yaml, .yml) - **CloudFormation** (.yaml, .json) - **Ansible** (.yml) - **Pulumi** (.ts, .js, .py) ## Output Format Generates markdown reports with: - Control ID and description - Evidence location (file:line) - Compliance status (Satisfied/Partial/Not Satisfied) - Recommendations for improvement ## Example Output ```markdown # Compliance Mapping Report ## SOC 2 - CC6.1: Logical and Physical Access Controls **Status:** ✅ Satisfied **Evidence:** - `main.tf:45` - `aws_db_instance` with `storage_encrypted = true` - `main.tf:52` - IAM role with least privilege policy **Mapping:** Data at rest encryption via AWS KMS satisfies encryption requirements. ``` ## Prerequisites - IaC file to analyze - Optional: Framework name (defaults to SOC2)

Frequently asked questions