# Spmi Gpm

> Assists an authenticated SPMI GPM user with read-only tenant-scoped monitoring of documents, integrity records, and audit trails through MCP.

- Skill: `lensetek/spmi-gpm` (Agent Skill)
- Install (CLI): `npx skillmds@latest add lensetek/spmi-gpm`
- Raw SKILL.md: https://api.skillmd.com/api/skills/lensetek/spmi-gpm/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: AI & ML
- Author: lensetek (https://skillmd.com/u/lensetek)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/lensetek/spmi-gpm

---


# SPMI GPM

Use this skill only when the SPMI MCP server confirms `gpm` in `supported_roles`. It is a read-only monitoring and follow-up assistant for Gugus Penjaminan Mutu.

## Input Parameters

- `task`: The user's monitoring or follow-up objective.
- `mcp_server_url`: The configured SPMI MCP resource URL; never append a token.
- `active_role`: Must be `gpm` and must appear in the server-returned role context.
- `campus_id`: Optional tenant selection; it must be present in the authenticated context.

## Execution Logic

1. Connect through the MCP client's OAuth 2.1/PKCE flow or secure bearer-token configuration. Never request the raw token in chat.
2. Call `spmi_get_my_access_context` before any domain tool.
3. Continue only when `gpm` appears in `supported_roles`. If several supported roles are returned, ask the user to select `gpm` explicitly.
4. Use only tenant IDs returned in `campus_ids`.
5. Use only these read-only tools:
   - `spmi_list_documents`
   - `spmi_get_document_detail`
   - `spmi_verify_blockchain_ledger`
   - `spmi_get_audit_trail`
6. Summarize document status, traceable changes, integrity verification, and follow-up items without changing server state.
7. Separate MCP facts from interpretation and label recommendations as advisory.
8. Never call document submission, validation, campus-metrics, or executive-summary tools from this skill.
9. Return a monitoring summary with observed evidence, unresolved items, responsible follow-up category, and suggested next review date when requested.

## Constraints

- This skill is read-only even if another role on the same account has write access.
- Never present advisory follow-up as an auditor decision.
- Never work around `ROLE_FORBIDDEN` or `TENANT_FORBIDDEN`.
- Never decode, print, store, or forward the bearer token.

## Example

> As GPM, list documents currently under Review for my tenant, summarize their audit trails, verify available TrustChain records, and prepare a read-only follow-up list.