1---2name: domain-audit3description: "Audit a session against its domain pack, especially the regulated and operations-heavy packs such as HR, legal, marketing, sales, real-estate, government, insurance, logistics, manufacturing, e-commerce, and nonprofit. Use this when domain-specific policy needs a manual pass."4when_to_use: "Activate before handling data in regulated or sensitive domains, or when the user asks about HR policy, legal compliance, GDPR, healthcare, finance, or any industry-specific governance requirements."5argument-hint: "[domain or data type to audit]"6license: Apache-2.07compatibility:8 - codex9 - claude-standalone10 - claude-plugin11 - copilot-plugin12 - github-repo13 - open-standard14metadata:15 author: controlkeel16 version: "2.0"17 category: domain18 ck_mcp_tools:19 - ck_context20 - ck_finding21---2223# Domain Audit Skill2425Use this skill when the session’s domain pack drives the real risk more than generic software checks.2627## Focus areas2829- HR: bias, candidate data, compensation visibility30- Legal: privilege, retention, document handling31- Marketing: consent, unsubscribe, analytics PII32- Sales: CRM data, contact deletion, revenue visibility33- Real estate: fair-housing logic, tenant PII, retention34- Government: records retention, constituent data, approval chains35- Insurance: claims fairness, medical-adjacent privacy, denial review36- E-commerce: card scope, refunds, fraud controls37- Logistics: shipment custody, dispatch safety, carrier data38- Manufacturing: QA holds, traceability, plant safety39- Nonprofit: donor privacy, grant restrictions, beneficiary exports4041## Additional resources4243- [Domain review matrix](references/domain-review-matrix.md)