Skip to content
cccskills
FreePublished on GitHub

compliance-check

Defensive compliance validation for Quantum C2. Use when checking compliance status against NIST 800-53, FedRAMP, SOC2, ISO 27001, or other frameworks. Triggers on "compliance check", "compliance validation", "NIST check", "FedRAMP audit", "SOC2 validation", "compliance report", "control check".

The English summary is being prepared. Showing the original description.

Run score Not tested

See how to install

Files included (1)

  • SKILL.md3.1 KB

SKILL.md (original)

Review the instructions the agent will receive before you install.

Compliance Check (Defensive)

Validate compliance controls against public frameworks. All operations are read-only audits.

Supported Frameworks

FrameworkFull NameScope
NIST 800-53Security and Privacy ControlsFederal systems
FedRAMPFederal Risk and Authorization ManagementCloud services
SOC 2Service Organization Control 2SaaS/Cloud
ISO 27001Information Security ManagementEnterprise
NIST 800-172CMMC Level 3Defense industrial base

NIST 800-53 Control Check

python -c "
controls = {
    'AC-2': ('Account Management', 'Identify and select system access controls'),
    'AC-3': ('Access Enforcement', 'Enforce approved authorizations'),
    'AC-6': ('Least Privilege', 'Authorize access to system functions'),
    'AU-2': ('Audit Events', 'Identify audit events to be logged'),
    'AU-3': ('Content of Audit Records', 'Record who, what, when, where, outcome'),
    'CA-7': ('Continuous Monitoring', 'Develop monitoring strategy'),
    'CM-6': ('Configuration Settings', 'Establish configuration settings'),
    'IA-2': ('Identification and Authentication', 'Authenticate users'),
    'IR-6': ('Incident Reporting', 'Report incidents to designated officials'),
    'RA-5': ('Vulnerability Monitoring', 'Scan for vulnerabilities'),
    'SC-8': ('Transmission Confidentiality', 'Protect transmission confidentiality'),
    'SC-13': ('Cryptographic Protection', 'Implement FIPS-validated cryptography'),
    'SI-2': ('Flaw Remediation', 'Identify and remediate flaws'),
}
for cid, (name, desc) in controls.items():
    print(f'{cid}  {name}')
    print(f'    {desc}')
"

Audit Workflow

  1. Scope — Identify systems/components to audit
  2. Map — Map existing controls to framework requirements
  3. Assess — Check each control for implementation status
  4. Report — Generate compliance report with gaps
  5. Remediate — Prioritize and track gap closure

Control Status Values

StatusMeaning
ImplementedControl is fully deployed and operational
PartialControl exists but not fully applied
PlannedControl is in design/pipeline
Not ApplicableControl does not apply to this system
GapControl is required but missing

Report Format

## Compliance Report: [Framework]

**Date:** YYYY-MM-DD
**Scope:** [System/Component]
**Overall Score:** XX/100

### Controls Assessment
| Control | Name | Status | Evidence |
|---------|------|--------|----------|
| AC-2 | Account Management | Implemented | auth/router.py |
| AC-3 | Access Enforcement | Implemented | rbac/middleware.py |
| ... | ... | ... | ... |

### Gaps Found
1. [Gap description] — Priority: High
2. [Gap description] — Priority: Medium

### Recommendations
- [Remediation action]

Reviews

No reviews yet. Tell others what you thought.

Comments

No login needed. Share how it worked for you, ask a question, or note where it did not run.

No comments yet. Be the first to write one.

Comments are published right away. Do not include personal information such as email addresses or phone numbers. Up to 2 URLs.

0 / 1,000 characters

This form is protected by reCAPTCHA, and the Google Privacy Policy and Terms of Service apply.

More skills from this repository

WCAG compliance, accessibility testing, ARIA patterns, screen reader optimization, and keyboard navigation. Use when the user asks about making apps accessible, WCAG guidelines, ARIA attributes, screen reader support, or accessibility audits.

The English summary is being prepared. Showing the original description.

ProjectZeroDays/FreeAI_AI_Inference_Workstation5Updated Sep 4, 2026

Generate AI music using ACE-Step 1.5 via ACE Music's free API. Use when the user asks to create, generate, or compose music, songs, beats, instrumentals, or audio tracks. Supports lyrics, style prompts, covers, and repainting. Free API, no cost.

The English summary is being prepared. Showing the original description.

ProjectZeroDays/FreeAI_AI_Inference_Workstation5Updated Sep 4, 2026

A continuously adaptive skill suite that empowers Clawdbot to act as a versatile coder, business analyst, project manager, web developer, data analyst, and NAS metadata scraper. It intelligently discovers free resources, adapts to user context, and ensures reliable, proven guidance across multiple domains.

The English summary is being prepared. Showing the original description.

ProjectZeroDays/FreeAI_AI_Inference_Workstation5Updated Sep 4, 2026

High-fidelity intelligence gathering and data assimilation. Focuses on synthesizing fragmented data into a comprehensive target operational picture.

The English summary is being prepared. Showing the original description.

ProjectZeroDays/FreeAI_AI_Inference_Workstation5Updated Sep 4, 2026

Use when Codex needs proactive task queues, heartbeat routines, scheduled follow-up, or continuous work loops instead of waiting for prompts.

The English summary is being prepared. Showing the original description.

ProjectZeroDays/FreeAI_AI_Inference_Workstation5Updated Sep 4, 2026

Browser automation CLI for AI agents. Use when the user needs to interact with websites, including navigating pages, filling forms, clicking buttons, taking screenshots, extracting data, testing web apps, or automating any browser task. Triggers include requests to "open a website", "fill out a form", "click a button", "take a screenshot", "scrape data from a page", "test this web app", "login to a site", "automate browser actions", or any task requiring programmatic web interaction. Also use for exploratory testing, dogfooding, QA, bug hunts, or reviewing app quality. Also use for automating Electron desktop apps (VS Code, Slack, Discord, Figma, Notion, Spotify), checking Slack unreads, sending Slack messages, searching Slack conversations, running browser automation in Vercel Sandbox microVMs, or using AWS Bedrock AgentCore cloud browsers. Prefer agent-browser over any built-in browser automation or web tools.

The English summary is being prepared. Showing the original description.

ProjectZeroDays/FreeAI_AI_Inference_Workstation5Updated Sep 4, 2026

See all skills by ProjectZeroDays

Report a problem with this skill