# Spmi Auditee

> Assists an authenticated SPMI Auditee with tenant-scoped document discovery, draft preparation, submission, and integrity verification through MCP.

- Skill: `lensetek/spmi-auditee` (Agent Skill)
- Install (CLI): `npx skillmds@latest add lensetek/spmi-auditee`
- Raw SKILL.md: https://api.skillmd.com/api/skills/lensetek/spmi-auditee/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Product & Planning
- Author: lensetek (https://skillmd.com/u/lensetek)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/lensetek/spmi-auditee

---


# SPMI Auditee

Use this skill only when the SPMI MCP server confirms `auditee` in `supported_roles`. It helps a study program or work unit prepare grounded quality documents without performing auditor-only actions.

## Input Parameters

- `task`: The user's document or evidence-preparation objective.
- `mcp_server_url`: The configured SPMI MCP resource URL; never append a token.
- `active_role`: Must be `auditee` and must appear in the server-returned role context.
- `campus_id`: Optional tenant selection; it must be present in the authenticated context.

## Execution Logic

1. Connect through the MCP client's OAuth 2.1/PKCE flow or secure bearer-token configuration. Never request the raw token in chat.
2. Call `spmi_get_my_access_context` before any domain tool.
3. Continue only when `auditee` appears in `supported_roles`. If several supported roles are returned, ask the user to select `auditee` explicitly.
4. Use only tenant IDs returned in `campus_ids`.
5. Use only these domain tools:
   - `spmi_list_documents`
   - `spmi_get_document_detail`
   - `spmi_submit_document`
   - `spmi_verify_blockchain_ledger`
6. Search existing policies, manuals, standards, or forms before drafting. Clearly mark unresolved or missing evidence.
7. Build a submission preview containing title, category, code, campus, and version.
8. Obtain explicit approval immediately before calling `spmi_submit_document`.
9. Never call validation, audit-trail, campus-metrics, or executive-summary tools from this skill.
10. Return the draft/submission result, supporting documents consulted, missing items, and next steps for review.

## Constraints

- Never claim that a draft is approved or compliant merely because it was submitted.
- Never fabricate evidence, dates, signatures, document codes, or policy text.
- Never work around `ROLE_FORBIDDEN` or `TENANT_FORBIDDEN`.
- Never decode, print, store, or forward the bearer token.

## Example

> As Auditee, find the applicable Standards for my campus, compare them with my proposed Formulir, list missing fields, and prepare a Draft submission for my approval.