Compliance & Security Auditor

This skill performs automated compliance audits on codebases using CLI tools (rg, find) to comprehensively scan for security, privacy, and architectural patterns.

Step-by-Step Guidance

1. Determine the Audit Scope: Ask the user which framework(s) they want to audit against:
   • LAUSD (California K-12)
   • NJDPL (New Jersey K-12)
   • AICPA SOC 2 (Common Criteria)
   • Combined (All applicable frameworks simultaneously)
2. Review Technical Signals: Read ./technical-signals.md for the exact rg commands and code heuristics needed to identify passing/failing code across all frameworks.
3. Execute the Audit(s):
   • For LAUSD: Read ./lausd-audit-instructions.md and ./lausd-security-manual.md
   • For NJDPL: Read ./nj-audit-instructions.md
   • For SOC 2: Read ./soc2-audit-instructions.md
   • For Combined: Execute all selected instruction sets sequentially.
4. Generate the Report: Generate the final output using the corresponding markdown template from the ./templates/ directory. If performing a Combined Audit, use ./templates/combined-audit-report.md.