Agent skill · Security

soc2-compliance-automator

SOC 2 Trust Services Criteria compliance automation for evidence collection, control mapping, and audit preparation

a5c-aigithub.com/a5c-aiGitHub ↗
claude-codecodexcan modify filesMIT
Install
npx skills add a5c-ai/babysitter --skill soc2-compliance-automator --agent claude-code

Same command for any agent — swap --agent for codex, cursor, copilot.

Facts
Files in the skill folder: 2
SKILL.md size: 6 KB
Bundled scripts: none
Allowed tools: -Bash-Read-Write-Glob-Grep-WebFetch
Path: library/specializations/security-compliance/skills/soc2-compliance-automator/SKILL.md
Open the folder on GitHub →
Where it comes from
Stars: 1,642
Language: JavaScript

Weekly change comes from our own snapshots, not the repository page — it measures attention, not adoption.

From the SKILL.md

# SOC 2 Compliance Automator Skill ## Purpose Automate SOC 2 Trust Services Criteria (TSC) compliance activities including control mapping, evidence collection, audit preparation, and continuous compliance monitoring. ## Capabilities ### Control Mapping - Map organizational controls to SOC 2 TSC requirements - Cover all five Trust Services Categories: - Security (Common Criteria) - Availability - Processing Integrity - Confidentiality - Privacy - Generate control matrices with evidence requirements - Identify control gaps and coverage ### Evidence Collection - Automate evidence gathering from cloud providers - Collect access control configurations (IAM, RBAC) - Capture security configurations and policies - Document change management processes - Archive audit logs and monitoring data - Screenshot automation for manual controls ### Audit Preparation - Generate Type I and Type II audit packages - Prepare management assertion documents - Create system description documents - Organize evidence by control objective - Generate auditor-ready reports ### Control Effectiveness Tracking - Monitor control implementation status - Track control testing results - Document control exceptions - Ma

What's inside
Steps it walks through
  1. Purpose
  2. Capabilities
  3. Control Mapping
  4. Evidence Collection
  5. Audit Preparation
  6. Control Effectiveness Tracking
  7. Continuous Compliance
  8. Trust Services Categories
  9. CC - Common Criteria (Security)
  10. A - Availability
  11. PI - Processing Integrity
  12. C - Confidentiality
  13. P - Privacy
  14. Integrations
Ships with 1 file
  • README.md
More from babysitter
All skills →
About this skill
What does the soc2-compliance-automator skill do?

SOC 2 Trust Services Criteria compliance automation for evidence collection, control mapping, and audit preparation

How do I install it?

Run `npx skills add a5c-ai/babysitter --skill soc2-compliance-automator --agent claude-code` — it drops the skill into your project so the agent can pick it up. Swap the --agent value for codex, cursor or copilot if you use one of those.

Where does this skill come from?

From a5c-ai/babysitter, a repository with 1,642 stars. We read it straight from the repository tree rather than a submitted listing, so what you see here is what is actually published.

Is a popular skill a good skill?

Not necessarily. Stars measure attention, not adoption — a repository can trend for a week and be abandoned. That is why we show the weekly change from our own snapshots next to the total, instead of a single flattering number.

Keep going