compliance-evidence-assembler

What This Skill Does

The 'compliance-evidence-assembler' is a specialized AI agent skill designed to streamline the audit preparation process. It acts as a structural assistant that organizes raw documents, evidence, and control mappings into a coherent, audit-ready package. By transforming unstructured data into a standardized format, this skill ensures that organizations can quickly identify what evidence is available, verify it against specific control requirements, and transparently document any missing gaps. It bridges the gap between raw data collection and the formal review stage, ensuring the audit trail remains organized and logically sound.

Installation

To integrate this skill into your environment, run the following command in your terminal: clawhub install openclaw/skills/skills/52yuanchangxing/compliance-evidence-assembler

Use Cases

• Audit Preparation: Automatically organize collected file assets into a formal evidence directory structure based on regulatory requirements.
• Gap Analysis: Compare current project documentation against a provided spec.json to generate a report on missing evidence.
• Evidence Tracking: Maintain a persistent list of evidence deliverables and their status, helping project leads prioritize remaining documentation tasks.
• Regulatory Readiness: Generate standardized summary reports for internal stakeholders to ensure compliance workflows are consistent and ready for external review.

Example Prompts

1. "I have a folder of security logs and policy documents. Please organize them based on the ISO 27001 evidence requirements specified in the resources directory and tell me what is missing."
2. "Review the provided evidence manifest. Based on the spec.json standards, draft a priority list for the team to complete the remaining audit evidence."
3. "Summarize the current state of our GDPR compliance evidence. Focus on identifying which control mappings are fully documented and which ones are currently lacking supporting files."

Tips & Limitations

• Data Integrity: This tool is designed strictly for organizational assistance. It will not, under any circumstances, create, edit, or falsify evidence to meet audit requirements. Doing so undermines the integrity of the audit process.
• Scope of Automation: The skill performs read-only analysis. When using the available scripting hooks, ensure all outputs are reviewed by a human auditor before being submitted to any external compliance platform.
• Dependencies: For optimal results, ensure your {baseDir}/resources/ directory is updated with the latest regulatory spec files. When uncertain about a file's intent, the skill will explicitly mark it as a 'pending confirmation' item rather than guessing its category.