無料GitHub で公開

compliance-check

Defensive compliance validation for Quantum C2. Use when checking compliance status against NIST 800-53, FedRAMP, SOC2, ISO 27001, or other frameworks. Triggers on "compliance check", "compliance validation", "NIST check", "FedRAMP audit", "SOC2 validation", "compliance report", "control check".

日本語の概要は準備中です。原文の説明を表示しています。

ProjectZeroDays/FreeAI_AI_Inference_Workstation

実行スコア未検証

インストール方法を見る

含まれるファイル（1）

SKILL.md3.1 KB

SKILL.md（原文）

インストールする前に、エージェントに与えられる指示の中身を確認できます。

Compliance Check (Defensive)

Validate compliance controls against public frameworks. All operations are read-only audits.

Supported Frameworks

Framework	Full Name	Scope
NIST 800-53	Security and Privacy Controls	Federal systems
FedRAMP	Federal Risk and Authorization Management	Cloud services
SOC 2	Service Organization Control 2	SaaS/Cloud
ISO 27001	Information Security Management	Enterprise
NIST 800-172	CMMC Level 3	Defense industrial base

NIST 800-53 Control Check

python -c "
controls = {
    'AC-2': ('Account Management', 'Identify and select system access controls'),
    'AC-3': ('Access Enforcement', 'Enforce approved authorizations'),
    'AC-6': ('Least Privilege', 'Authorize access to system functions'),
    'AU-2': ('Audit Events', 'Identify audit events to be logged'),
    'AU-3': ('Content of Audit Records', 'Record who, what, when, where, outcome'),
    'CA-7': ('Continuous Monitoring', 'Develop monitoring strategy'),
    'CM-6': ('Configuration Settings', 'Establish configuration settings'),
    'IA-2': ('Identification and Authentication', 'Authenticate users'),
    'IR-6': ('Incident Reporting', 'Report incidents to designated officials'),
    'RA-5': ('Vulnerability Monitoring', 'Scan for vulnerabilities'),
    'SC-8': ('Transmission Confidentiality', 'Protect transmission confidentiality'),
    'SC-13': ('Cryptographic Protection', 'Implement FIPS-validated cryptography'),
    'SI-2': ('Flaw Remediation', 'Identify and remediate flaws'),
}
for cid, (name, desc) in controls.items():
    print(f'{cid}  {name}')
    print(f'    {desc}')
"

Audit Workflow

Scope — Identify systems/components to audit
Map — Map existing controls to framework requirements
Assess — Check each control for implementation status
Report — Generate compliance report with gaps
Remediate — Prioritize and track gap closure

Control Status Values

Status	Meaning
Implemented	Control is fully deployed and operational
Partial	Control exists but not fully applied
Planned	Control is in design/pipeline
Not Applicable	Control does not apply to this system
Gap	Control is required but missing

Report Format

## Compliance Report: [Framework]

**Date:** YYYY-MM-DD
**Scope:** [System/Component]
**Overall Score:** XX/100

### Controls Assessment
| Control | Name | Status | Evidence |
|---------|------|--------|----------|
| AC-2 | Account Management | Implemented | auth/router.py |
| AC-3 | Access Enforcement | Implemented | rbac/middleware.py |
| ... | ... | ... | ... |

### Gaps Found
1. [Gap description] — Priority: High
2. [Gap description] — Priority: Medium

### Recommendations
- [Remediation action]

レビュー

まだレビューはありません。使ってみた感想をお寄せください。

ログインなしで書き込めます。使ってみた感想、質問、動かなかった環境などを気軽にどうぞ。

まだコメントはありません。最初のコメントを書いてみませんか。

同じリポジトリのスキル

accessibility-audit

無料

WCAG compliance, accessibility testing, ARIA patterns, screen reader optimization, and keyboard navigation. Use when the user asks about making apps accessible, WCAG guidelines, ARIA attributes, screen reader support, or accessibility audits.

日本語の概要は準備中です。原文の説明を表示しています。