Agent skill · product strategy · alirezarezvani
compliance-readiness
Use for /compliance-os:compliance-readiness, or before adding a framework or planning the annual audit calendar.
Why this skill is useful
Adds 4 executable scripts for compliance readiness assessments that are not commonly found in public documentation.
What it needs
Requires python installed locally. About 3k tokens when loaded. Last updated 2026-08-05. 23,939 stars on the source repository.
What this skill does
/compliance-os:compliance-readiness — Compliance Officer Forcing Questions Command: /compliance-os:compliance-readiness <program> The multi-framework compliance officer pressure-tests any compliance program. Six questions before any new-framework commitment, audit cycle planning, or certification readiness sign-off. When to Run Before adopting a new compliance framework Before annual audit calendar finalization Before certification stage 1 readiness sign-off Before management review (Clause 9.3 across frameworks) When evidence-collection effort has grown 50%+ year-over-year (a smell) When an audit produced > 15% critical findings The Six Compliance Officer Questions 1. Have you named every applicable framework? No framework selector run, no defensible scope. Run frameworkselector.py with company profile Forgetting a framework means rebuilding the audit program later Pay attention to industry-specific overlays (financial: NYDFS, FINMA; healthcare: HIPAA, ISO 13485; AI: ISO 42001 + EU AI Act) 2. Where do the frameworks overlap, and what's the reuse leverage? Single evidence -> N controls = the cornerstone of multi-framework efficiency. Run crossframeworkmapper.py with enabled frameworks HIGH-confidence mappings: same evidence; MEDIUM: existing + overlay; LOW: new artefact Without overlap analysis, you'll collect the same access-review records 3 times 3. Who owns each artefact, and what's the reuse-leverage score? Joint ownership without accountability is the most common cause of stale evidence. Run evidencepoolgenerator.py for the artefact inventory HIGH-leverage artefacts (≥ 5 mappings) get built first Each artefact needs one accountable owner Stale evidence is an effective gap — even if the artefact existed historically 4. What's the audit calendar, and is auditor independence respected? Surveillance audits stacking in the same week is a smell. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills alirezarezvani/compliance-readiness--fb511a