# Compliance Review

> Compliance review for auditability, GDPR/PII, retention, financial controls, consent, and regulatory traceability.

- Skill: `thomasmoreai/compliance-review` (Agent Skill)
- Install (CLI): `npx skillmds@latest add thomasmoreai/compliance-review`
- Raw SKILL.md: https://api.skillmd.com/api/skills/thomasmoreai/compliance-review/raw
- Safety review: PASS (external: skill-scanner PASS, skillspector PASS)
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Coding & Dev Tools
- License: MIT
- Author: ThomasMoreAI (https://skillmd.com/u/thomasmoreai)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/thomasmoreai/compliance-review

---


## Purpose

Compliance review for auditability, GDPR/PII, retention, financial controls, consent, and regulatory traceability.

## Review focus

- PII without purpose
- missing audit trail
- retention mismatch
- GDPR risk
- financial control gap
- insufficient consent

## Method

1. Inspect changed files and diff hunks relevant to this skill.
2. Use repository-native tools when available.
3. Prefer exact evidence from changed code.
4. Emit findings using the shared JSONL finding contract.
5. Avoid style-only comments unless they create maintainability or correctness risk.

## Tooling hints

- Use `grep` or editor search before opening files.
- Use `git`, `grep`, and `gh` CLI. These are universally available and sufficient for all review tasks.
- Do not depend on tools beyond `git`, `grep`, `cat`, `head`, `wc`, and `gh`.