合规检查器Skill compliance-checker

---

名称: 合规检查器 描述: 检查是否符合 SOC 2、GDPR、HIPAA 和 PCI-DSS 标准 允许使用的工具:

• Bash
• 读取
• 写入
• Glob

---

合规检查器技能

概述

通过分析代码、配置和基础设施是否符合监管要求，来检查与 SOC 2、GDPR、HIPAA 和 PCI-DSS 标准的合规性。

能力

• SOC 2 合规性检查
• GDPR 要求验证
• HIPAA 合规性评估
• PCI-DSS 验证
• 自定义合规框架支持
• 证据收集
• 差距分析报告
• 修复指导

目标流程

• 安全架构审查
• 基础设施即代码审查
• 数据架构设计

输入模式

{
  "type": "object",
  "required": ["frameworks", "targets"],
  "properties": {
    "frameworks": {
      "type": "array",
      "items": {
        "type": "string",
        "enum": ["soc2", "gdpr", "hipaa", "pci-dss", "iso27001", "nist"]
      }
    },
    "targets": {
      "type": "object",
      "properties": {
        "code": { "type": "array" },
        "infrastructure": { "type": "array" },
        "documentation": { "type": "array" }
      }
    },
    "options": {
      "type": "object",
      "properties": {
        "scope": {
          "type": "array",
          "description": "要检查的特定控制项"
        },
        "collectEvidence": {
          "type": "boolean",
          "default": true
        },
        "outputFormat": {
          "type": "string",
          "enum": ["json", "markdown", "pdf"],
          "default": "markdown"
        }
      }
    }
  }
}

输出模式

{
  "type": "object",
  "properties": {
    "frameworks": {
      "type": "array",
      "items": {
        "type": "object",
        "properties": {
          "name": { "type": "string" },
          "complianceScore": { "type": "number" },
          "controls": {
            "type": "array",
            "items": {
              "type": "object",
              "properties": {
                "id": { "type": "string" },
                "name": { "type": "string" },
                "status": { "type": "string" },
                "findings": { "type": "array" },
                "evidence": { "type": "array" }
              }
            }
          }
        }
      }
    },
    "gaps": {
      "type": "array",
      "items": {
        "type": "object",
        "properties": {
          "control": { "type": "string" },
          "gap": { "type": "string" },
          "remediation": { "type": "string" },
          "priority": { "type": "string" }
        }
      }
    },
    "summary": {
      "type": "object",
      "properties": {
        "overallScore": { "type": "number" },
        "passedControls": { "type": "number" },
        "failedControls": { "type": "number" },
        "notApplicable": { "type": "number" }
      }
    }
  }
}

使用示例

{
  kind: 'skill',
  skill: {
    name: 'compliance-checker',
    context: {
      frameworks: ['soc2', 'gdpr'],
      targets: {
        code: ['src/**/*.ts'],
        infrastructure: ['terraform/**/*.tf'],
        documentation: ['docs/security/**/*.md']
      },
      options: {
        collectEvidence: true,
        outputFormat: 'markdown'
      }
    }
  }
}