Audit & compliance
7,541 rows from 1,970 repositories
Checking a thing against a standard somebody else wrote.
What Audit & compliance skills agree on
1,290 skill files read, by 960 of the 1,589 authors on this shelf whose files we hold, 2026-09-06
The middle one of the 178 measured here is ~1.6k tokens long, counted with cl100k_base
Counted by distinct author, so one author publishing three of these counts once. Where a claim sits in fewer files than authors, that is said: a claim held by forty authors across three files is one file people copied, not forty people who agreed. Near-identical wordings are grouped and the other wordings are shown, so the grouping is yours to check.
What they tell the agent to do
- Read product marketing context before asking questions29 of 960 in 11 filesalso worded as Check for product marketing context first.; Read product marketing context first
- Rank findings by severity29 of 960 in 22 filesalso worded as Categorize findings by severity; Classify findings by severity
- Generate audit report22 of 960also worded as Generate report; Generate full security audit report
- Run the audit script20 of 960 in 19 filesalso worded as Run the audit command; Run the audit script for each site
- Generate a prioritized action plan report19 of 960 in 11 filesalso worded as Generate prioritized action plan; Generate a prioritized action plan
- Ensure one H1 per page15 of 960 in 5 filesalso worded as Maintain one H1 per page.; Check for one H1 per page
- Ensure sitemap exists and is accessible14 of 960 in 4 filesalso worded as Ensure XML sitemap is accessible and submitted.; Verify xml sitemap exists and is accessible
- Verify alt text on all images12 of 960 in 3 filesalso worded as Include alt text on all images.; Verify all non text content has alt text
- Determine the audit scope before starting12 of 960 in 4 filesalso worded as Define audit scope before starting; Define scope before auditing the system
- Detect business type from homepage signals11 of 960 in 7 filesalso worded as Detect the business type by analyzing homepage signals; Fetch the homepage and detect business type
- Delegate specialized tasks to subagents11 of 960 in 7 filesalso worded as Delegate tasks to available subagents; Delegate analysis to 5 specialized subagents
- Present findings organized by severity11 of 960also worded as Report findings grouped by severity; Separate findings by severity
- Classify every finding by severity11 of 960also worded as Assign a severity to every finding.; classify every finding using the severity framework
- Ensure all pages have canonical tags10 of 960 in 4 filesalso worded as verify all pages have canonical tags
- Classify goods using GRI rules and chapter analysis10 of 960 in 4 filesalso worded as Classify products using GRI rules; Classify products using GRI rules and analysis
What they tell it not to do
- Do not modify files25 of 960also worded as Do not modify any files; Do not modify files unless explicitly asked.
- Do not invent a plausible entry to fill a field19 of 960also worded as Never invent a plausible entry to fill a field; Never invent a plausible entry
- Do not apply fixes15 of 960 in 12 filesalso worded as Do not auto-apply fixes; Never apply fixes
- Never modify code or infrastructure15 of 960 in 11 filesalso worded as Do not modify code; Never modify code
- Do not modify the code being audited14 of 960 in 12 filesalso worded as Do not modify code during evaluation; Never modify or delete audit entries
- Never fabricate findings13 of 960also worded as Do not fabricate findings; Never fabricate evidence
- Do not report no schema found using web_fetch12 of 960 in 5 filesalso worded as Do not report no schema found using web fetch; Never report no schema found based solely on web fetch
- Do not remove focus outlines without a visible replacement12 of 960 in 8 filesalso worded as Never remove focus outlines; Do not use outline none without focus visible
- Never proceed with a transaction while a screening hit is unresolved10 of 960 in 4 filesalso worded as Never proceed with an unresolved screening hit; Do not proceed with transactions during unverified hits
- Do not fix issues while auditing10 of 960 in 8 filesalso worded as Don't fix issues.; Do not fix issues found during the audit
What they expect to be installed
- git126 of 960
- grep120 of 960
- python356 of 960
- curl56 of 960
- bash53 of 960
- python43 of 960 in 42 files
- node43 of 960
- find41 of 960
- Glob41 of 960 in 40 files
- gh36 of 960
What they ask it to produce
- Audit report142 of 960 in 135 filesalso worded as Security Audit Report; Audit Report Structure
- Findings39 of 960also worded as Detailed findings; findings report
- Structured report30 of 960also worded as Structured audit report; structured findings report
- Markdown report29 of 960also worded as Markdown audit report; Single Markdown report
- FULL-AUDIT-REPORT.md23 of 960 in 20 filesalso worded as audit-report.md; ADS-AUDIT-REPORT.md
- Compliance report22 of 960 in 21 filesalso worded as completion report; compliance-report.md
- Accessibility audit report20 of 960 in 18 filesalso worded as accessibility audit reports; Accessibility issue report
- ACTION-PLAN.md18 of 960 in 14 filesalso worded as Action plan; plan.md
When Audit & compliance authors say to reach for one
The situations these authors wrote into their own files, counted out of the same 960 authors, with the skills that name each one
- Audit26 of 960 in 23 files
- Generalupdate security audit
- Seo audit
- Quality audit
- Business logic audit
- and 1 more on this shelf
- SEO health check26 of 960 in 16 files
- Seo audit
- Marketing seo audit
- and 16 more on this shelf
- User asks to audit the codebase23 of 960 in 20 files
- Ponytail audit
- Code health audit
- and 4 more on this shelf
- SEO audit21 of 960 in 15 files
- Seo audit
- Marketing seo audit
- and 15 more on this shelf
- Conduct security audits21 of 960 in 19 files
- User says audit21 of 960
- User asks to audit architecture21 of 960
- Audit
- Architecture audit
- Deps audit
- and 6 more on this shelf
- User wants to audit SEO issues19 of 960 in 10 files
How Audit & compliance skills are built
6,496 skill directories by 1,628 authors, read from their repositories’ own file trees 2026-08-05
The middle bundle among those shipping files is 3 files, 19.1 KB beside SKILL.md
Counted by distinct author, same as above, so one author publishing forty template copies counts once. SKILL.md itself is not counted as a file, so a single-file skill is one where that file is the whole skill.
The shape
- SKILL.md is the whole skill618 of 1,628 authors, 3,194 of 6,496 skills
- files ship beside it1,010 of 1,628 authors, 3,302 of 6,496 skills
- executable scripts ship inside391 of 1,628 authors, 1,038 of 6,496 skills
The folders they converge on
- references/648 of 1,628 authors, 2,079 of 6,496 skills
- scripts/344 of 1,628 authors, 931 of 6,496 skills
- agents/184 of 1,628 authors, 529 of 6,496 skills
- assets/134 of 1,628 authors, 334 of 6,496 skills
- evals/110 of 1,628 authors, 207 of 6,496 skills
- examples/72 of 1,628 authors, 141 of 6,496 skills
DietrichGebert/ponytail/.openclaw/skills/ponytail-audit Skill
102,911★ repoMakes your AI agent think like the laziest senior dev in the room. The best code is the code you never wrote.
trailofbits/skills/plugins/agentic-actions-auditor/skills/agentic-actions-auditor Skill
6,559★ repoTrail of Bits Claude Code skills for security research, vulnerability detection, and audit workflows
open-gitagent/opengap/examples/full/skills/document-review Skill
2,907★ repoA framework-agnostic, git-native standard for defining AI agents
addyosmani/web-quality-skills/skills/accessibility Skill
2,628★ repoAgent Skills for optimizing web quality based on Lighthouse and Core Web Vitals.
aaron-he-zhu/aaron-marketing-skills/ad/activate/ad-account-auditor Skill
2,560★ repo120 marketing skills + 8 commands for Claude Code & AI agents across 7 disciplines — SEO/GEO, influencer, paid ads, email, product launch, organic social & brand narrative — on one shared contract, with 8 auditor gates: CORE-EEAT · CITE · STAR · ROAS · SEND · RAMP · ECHO · TALE.
pedrohcgs/claude-code-my-workflow/.claude/skills/audit-reproducibility Skill
1,465★ repoA ready-to-fork Claude Code template for academics using LaTeX/Beamer + R. Multi-agent review, quality gates, adversarial QA, and replication protocols.
first-fluke/oh-my-agent/.agents/skills/oma-academic-writer Skill
1,226★ repoPortable, vendor-agnostic agent harness for project-specific skills, workflows, and agent teams aligned with your codebase, conventions, and engineering standards.
GanyuanRan/Aegis/skills/anti-entropy-governance Skill
990★ repoMake AI coding agents architecture-aware: baseline-first, evidence-verified, drift-checked, and safe across long tasks.
Ai governance reviewer carl ditzler
lawve-ai/awesome-legal-skills/skills/ai-governance-reviewer-carl-ditzler Skill
no license641★ repoA curated list of awesome Agent Skills for automating legal work
levnikolaevich/claude-code-skills/plugins/codebase-audit-suite/skills/ln-21-documentation-auditor Skill
535★ repo18 standalone skills for Claude Code and Codex: review, audit, optimization, testing, product discovery, and safe repository publishing.
rampstackco/claude-skills/dist/pi/.agents/skills/accessibility-audit Skill
531★ repoStack-agnostic Claude Skills covering the full website lifecycle: brand, design, content, SEO, dev, ops, growth, and research. Build, ship, audit, optimize.
ViryaZheng/recomby-geo/plugins/recomby-geo/skills/content-quality-auditor Skill
507★ repoGEO 领域 AI 员工开源方案 · Open-source GEO AI-employee solution (MIT). GEO Skills package + curated lists of agents and office CLIs that make up the AI-employee stack.
plugin87/ux-ui-agent-skills/.claude/skills/a11y-audit Skill
no license493★ repoTurn Claude into a Senior Design Architect — DTCG design tokens, 42 components, WCAG 2.2 accessibility, any-framework code, 138 design systems, and runnable skills.
BrianRWagner/ai-marketing-claude-code-skills/ai-discoverability-audit Skill
no license393★ repoMarketing frameworks that AI actually executes. Designed for Claude Code, but could be used for OpenClaw, etc.
seo-skills/seo-audit-skill Skill
380★A comprehensive SEO audit command-line tool with 108 audit rules across 12 categories. Analyze any website for SEO best practices, Core Web Vitals, security headers, structured data, accessibility, and more.
jamditis/claude-skills-journalism/dev-toolkit/skills/accessibility-compliance Skill
360★ repoClaude Code skills for journalism, media, and academia - verification, FOIA, data journalism, academic writing, and more
superagents-lab/xcode27-skills/audit-xcode-security-settings Skill
no license276★ repoApple's official Agent Skills exported from Xcode 27 — SwiftUI, UIKit modernization, Swift Testing, C bounds-safety, and security hardening for AI coding agents.
OneWave-AI/claude-skills/accessibility-auditor Skill
248★ repo172 production-ready Claude Code skills for sales, marketing, design, engineering, and AI agent architecture. Built and maintained by OneWave AI.
billy-enrizky/openbrowser-ai/plugin/skills/accessibility-audit Skill
238★ repoOpenBrowser is a framework for intelligent browser automation. It combines direct CDP communication with a CodeAgent architecture, where the LLM writes Python code executed in a persistent namespace, to navigate, interact with, and extract information from web pages autonomously.
maddhruv/absolute/skills/absolute-audit Skill
206★ repoAbsolute Skills to 10x your Development Lifecycle
vishalsachdev/canvas-mcp/skills/canvas-accessibility-auditor Skill
191★ repoCanvas LMS MCP server — 80+ tools and 5 agent skills for students & educators. Works with Claude, Cursor, Codex, and 40+ agents. v1.1.0
AElfProject/aelf-skills Skill
no license184★Unified aelf skills hub for discovery, routing, bootstrap, and health checks across OpenClaw, Codex, Cursor, and Claude Code.
wednesday-solutions/ai-agent-skills/skills/agents/module-audit Skill
165★ repoPre-configured agent skills for Vibe Coded projects. These skills provide AI coding assistants (Claude Code, Cursor, etc.) with specific guidelines for code quality and design standards.
guangshu100/BidMaster-Pro/skills/check/compliance_check Skill
140★ repo全流程 智能招投标 Agent:标书生成 · 招投标解读 · 标书检查 · 标书文档ai排版 · 商机发现 一键完成。 21 项合规检查 · 多模型切换 · RAG 知识库 · OCR 抽取。 从招标公告到可交付 docx 文档,全流程 AI 自动化。
goSprinto/compliance-skills/gdpr-compliance-checker Skill
130★ repoTheGoat395/Codex-Skills/skills/accessibility-audit-websites Skill
117★ repoCodex-first Agent Skills library for premium frontend, website, motion, accessibility, QA, and handoff workflows.
cognyai/claude-code-marketing-skills/skill-pipeline/google-ads-audit Skill
no license92★ repoMarketing skills for Claude Code — SEO audits and implementation, ad analysis, ad optimization. Free skills need no account. $9/mo for live Search Console, Bing & LinkedIn data.
deepklarity/harness-kit/.claude/skills/fable-audit Skill
89★ repoA kit for building with AI agents and also the engineering patterns around it.
ScaleBrick/founder-marketing-skills/skills/audit Skill
88★ repoOpen-source marketing skills for founders. Keyword research, growth strategy, social search audit, competitor analysis. Install with npx skills.
DheerG/swarms/skills/audit-context Skill
84★ repoAchieve extraordinary results with claude code across a variety of tasks
nelsonwerd/idea-to-ship-skills/skills/audit-and-fix Skill
82★ repoComposable Agent Skills (Claude + OpenAI Codex) for taking an idea from fuzzy → validated → sequenced build → shipped — a manual tier (ideate, deep-dive, prompt-pack) and an autonomous tier (autopilot, build-loop, audit-and-fix).
apache/magpie/skills/audit-finding-fix Skill
78★ repoAgent-assisted maintainership and development framework for Apache projects — Triage, Mentoring, Drafting (agent-authored fixes with human review), and Pairing (developer-side dev-cycle) skills shipping; Agentic Autonomous (auto-merge) on the roadmap.
JasonxzWen/harness-hub/skills/agent-interaction-audit Skill
no license77★ repoRepository-first deterministic migration and atomic Skill source for Claude Code and Codex.
gebalamariusz/cloud-audit/io.github.gebalamariusz/cloud-audit MCP server
68★ repoAWS security scanner with attack chain detection, IAM privilege escalation, and fixes
mmTheBest/Research-Architect/dist/codex/skills/research-architect-audit Skill
67★ repoAn end-to-end research workflow skill for turning ideas into evidence-backed, citation-supported manuscript drafts
naveedharri/benai-skills/plugins/ads/skills/ads-audit Skill
55★ repoSlanchaAI/ingot/evals/fixtures/skills/blocked-audit Skill
49★ repoChange management, SkillOpt optimization, and evidence-gated evals for agent skills.
solanabr/auditor-skill Skill
48★Claude Code / agentic security skill for Solana programs and software. Full audit-firm lifecycle, executable PoC + fix-patch delivery, a Rust pre-scanner + cross-audit memory, 1,346 checks across 20 checklists, and 131 real-world attack vectors.
cuellarfr/design-skills/accessibility-audit Skill
48★ repoUX and design skills for Claude Code — research, critique, accessibility, journey mapping and more.
marconae/speq-skill/.claude/skills/speq-audit Skill
48★ repoA light-weight and straightforward system for spec-driven development with Claude Code or OpenAI Codex. Written in Rust 🦀
natdexterra/work-with-design-systems Skill
48★Inspect, build, or extend Figma design systems from Claude Code. Read-only audits with WCAG checks and component scoring, build mode with variable bindings and slots, optional Phase 6 sync to tokens.css + AI rules.
BagelHole/DevOps-Security-Agent-Skills/compliance/auditing/audit-logging Skill
46★ repoAgent-ready DevOps, security, infrastructure, and compliance knowledge base with 80+ skills across Kubernetes, Terraform, AWS/Azure/GCP, AI platform operations, container hardening, SOC2/ISO27001, and incident response—plus ready-to-run scripts, templates, and playbooks for SRE, platform, and security teams.
Stanestane/game-design-skills-bundle/design-red-team-audit Skill
no license44★ repoA public OpenClaw and ClawHub-ready bundle of game design skills for emotional direction, feature workflows, audits, FTUE, pitch decks, prototyping, and red-team design review.
atharvnaik1/ipaship-audit/wrappers/claude-code Skill
43★ repoLet your AI Agent review your iOS/Android apps for appstore policy & security bugs with ipaShip's web app, cli, mcp or claude-skill with safety hooks layer any any llm agent you use - loopin fixes in dev stage only no more waits till submissions.
jiankang1991/nsfc-benzi-audit/nsfc-benzi-audit Skill
40★ repo一个用于国家自然科学基金(NSFC/国自然)申请书初稿诊断的 Agent Skill
skill-mill/agent-skill-harbor/.claude/skills/manage-governance Skill
39★ repoPrivate skill catalog / marketplace for teams
nitinjain999/platform-skills Skill
36★A platform engineering handbook covering Kubernetes, OpenShift, Argo CD, Flux CD, AWS, Azure, Terraform, and GitHub Actions — with an optional Claude plugin layer for interactive guidance.
netresearch/security-audit-skill/skills/security-audit Skill
no license35★ repoAgent Skill for PHP security audits - OWASP patterns, vulnerability detection | Claude Code compatible
Librecrawl — Technical SEO Audit MCP Server
adityaarsharma/librecrawl-technical-seo-audit-mcp/io.github.adityaarsharma/librecrawl-technical-seo-audit-mcp MCP server
34★ repoSelf-hosted technical SEO audit MCP. 50+ checks, WAF detection, ephemeral. Built on LibreCrawl.
Hainrixz/claude-seo-ai/skills/audit Skill
33★ repoThe SEO + AI-search (GEO/AEO) optimization toolkit for Claude Code — two-score audit + opt-in fixer. Built for 2026-2027.
alirezarezvani/gaios/.claude/skills/audit Skill
no license32★ repoOpen-source AI Operating System (AIOS) blueprint for Claude Code & Codex — turn any agent into your personal second brain + Chief of Staff: skills, self-verifying workflows, a second-brain wiki, and deterministic tools. Fork it for any role or domain.
geoffreycrofte/luxembourg-accessibility-skillset/raam-audit Skill
31★ repoA set of skills including RAWeb, RAM, and RAPDF coverage for AI (targeting Claude Code)
blackblue-labs/skill2/skills/skill2-audit Skill
30★ repoSkills for your skills. Create, test, audit, package, and visualize Agent Skill libraries—locally.
saeed-vayghan/gemini-agent-skills/.agent/skills/basic-sample-api-auditor Skill
30★ repoA comprehensive collection of expert AI Agent Skills for Google Gemini, featuring a powerful CLI to convert and optimize Claude Code agents for the Gemini ecosystem.
haymon-ai/dbmcp/ai.haymon/dbmcp MCP server
30★ repoDatabase MCP server for MySQL, MariaDB, PostgreSQL & SQLite with PII redaction and write-prevention
Sushegaad/MCP-Server-for-ISO27001/io.github.Sushegaad/iso27001-mcp MCP server
28★ repoISO 27001 compliance workspace for Claude. Risks, policies, SoA, evidence, and audit workflows.
eldermoraes/quarkus-agentic-scaffolding/skills/audit-project Skill
27★ repoScaffolding skill + always-on conventions (CLAUDE.md/AGENTS.md) for Quarkus + LangChain4j agentic AI apps: AI services, multi-agent workflows, and RAG. Installable in Claude Code, Codex, Copilot, Cursor, and any Agent Skills-compatible agent.
yha9806/academic-writing-toolkit/.claude/skills/argument-governance Skill
27★ repoLocal-first, evidence-controlled academic writing workflows for AI agents, with bounded revision, clean-room review, and release governance.
wonfull888/seo-audit Skill
25★SEO Audit Skill is an AI-powered SEO auditing tool based on Google Search guidelines and the Ahrefs SEO checklist. Runs in any skill-enabled CLI (Claude Code recommended). Covers 92 checks with results comparable to paid tools—using minimal tokens.
myclaude-sh/myclaude-creator-engine/.claude/skills/aegis Skill
24★ repoThe creation pipeline for Claude Code products — research, create, validate, publish. 13 types, 20 quality patterns, zero coding required.