Skill Tracer
Skills › Knowledge Work Plugins › compliance-tracking

compliance-tracking

skill · 44 lines · Apache-2.0 · operations/skills/compliance-tracking/SKILL.md

The facts

Its description

Track compliance requirements and audit readiness. Trigger with "compliance", "audit prep", "SOC 2", "ISO 27001", "GDPR", "regulatory requirement", or when the user needs help tracking, preparing for, or documenting compliance activities.

The description the agent reads to decide when to use it.

From its settingsline 3

When it starts

Someone asks for help tracking compliance requirements, getting ready for an audit, or documenting readiness against a framework such as SOC 2, ISO 27001, GDPR, HIPAA, or PCI DSS. The description is the only thing the agent sees first, and it names those triggers directly.

Things a person might say (the model's guesses)

  • “We have a SOC 2 audit coming up in three months — help me get ready”
  • “What do we need to track to stay GDPR compliant?”
  • “Build me a gap analysis for ISO 27001 and a plan to close it”

A model's summary of when it is used.

A model's reading

Licence

Apache-2.0, from LICENSE

The terms its author shares it under, which let it be shown here.

From the repositorylicence text

The text

Open on GitHub
1---
2name: compliance-tracking
3description: Track compliance requirements and audit readiness. Trigger with "compliance", "audit prep", "SOC 2", "ISO 27001", "GDPR", "regulatory requirement", or when the user needs help tracking, preparing for, or documenting compliance activities.
4---
5
6# Compliance Tracking
7
8Help track compliance requirements, prepare for audits, and maintain regulatory readiness.
9

Compliance Tracking

Help track compliance requirements, prepare for audits, and maintain regulatory readiness.

Raw lines 1 to 9
10## Common Frameworks
12| Framework | Focus | Key Requirements |
13|-----------|-------|-----------------|
14| SOC 2 | Service organizations | Security, availability, processing integrity, confidentiality, privacy |
15| ISO 27001 | Information security | Risk assessment, security controls, continuous improvement |
16| GDPR | Data privacy (EU) | Consent, data rights, breach notification, DPO |
17| HIPAA | Healthcare data (US) | PHI protection, access controls, audit trails |
18| PCI DSS | Payment card data | Encryption, access control, vulnerability management |

Common Frameworks

FrameworkFocusKey Requirements
SOC 2Service organizationsSecurity, availability, processing integrity, confidentiality, privacy
ISO 27001Information securityRisk assessment, security controls, continuous improvement
GDPRData privacy (EU)Consent, data rights, breach notification, DPO
HIPAAHealthcare data (US)PHI protection, access controls, audit trails
PCI DSSPayment card dataEncryption, access control, vulnerability management
Raw lines 10 to 19
20## Compliance Tracking Components

Compliance Tracking Components

Raw lines 20 to 21
22### Control Inventory
23- Map controls to framework requirements
24- Document control owners and evidence
25- Track control effectiveness

Control Inventory

  • Map controls to framework requirements
  • Document control owners and evidence
  • Track control effectiveness
Raw lines 22 to 26
27### Audit Calendar
28- Upcoming audit dates and deadlines
29- Evidence collection timelines
30- Remediation deadlines

Audit Calendar

  • Upcoming audit dates and deadlines
  • Evidence collection timelines
  • Remediation deadlines
Raw lines 27 to 31
32### Evidence Management
33- What evidence is needed for each control
34- Where evidence is stored
35- When evidence was last collected

Evidence Management

  • What evidence is needed for each control
  • Where evidence is stored
  • When evidence was last collected
Raw lines 32 to 36
37### Gap Analysis
38- Requirements vs. current state
39- Prioritized remediation plan
40- Timeline to compliance

Gap Analysis

  • Requirements vs. current state
  • Prioritized remediation plan
  • Timeline to compliance
Raw lines 37 to 41
42## Output
44Produce compliance status dashboards, gap analyses, audit prep checklists, and evidence collection plans.

Output

Produce compliance status dashboards, gap analyses, audit prep checklists, and evidence collection plans.

Raw lines 42 to 44

From anthropics/knowledge-work-plugins at 2574e29, 2026-10-27. Skills read by DeepSeek V4.1 Flash on 2026-11-04. Summary and techniques by Claude Opus 5.5 on 2026-11-06.