Audit scope checklist
Skill maxwellokumu/okaudit-claude-skills/lead-it-auditor/audit-scope-checklist
Claude-ready IT audit skills for identity, compliance, appsec, privacy, network, logging, vendor risk, and audit leadership workflows
npx -y skills add maxwellokumu/okaudit-claude-skills --skill audit-scope-checklistAssembled from the repository path, not quoted from the project. Check it against their README if it does not work.
2 things to look at
- no licenseNo license file was found in the repository. Code published without one is not open source by default, so using it at work is a question for whoever answers licensing questions where you are.
- 5 stars5 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.
What its author says it does
Copied from the file, not written here
Generate a scoped IT audit program with controls mapped to roles and compliance frameworks. Use this skill for audit planning, control checklist generation, and audit_program.json creation.
SKILL.md
1.8 KB, as published. Nobody here has run it
Audit Scope Checklist
Use this skill when the user asks for audit scope, audit program, audit checklist, control checklist, or audit planning.
Goal
Generate a scoped IT audit program with controls mapped to roles and compliance frameworks. Use it to produce a markdown audit plan and an audit_program.json file for downstream analysis.
Workflow
- Clarify the system or environment being audited.
- Collect the relevant role filters and framework filters if the user has them.
- Review README.md if you need the supported role IDs or sample output structure.
- Run main.py with the selected inputs.
- Return the generated scope and call out any missing role or framework assumptions.
Inputs
- system (string, required): Description of the system or environment being audited.
- roles (string, optional): Comma-separated list of role IDs to include.
- frameworks (string, optional): Comma-separated list of compliance frameworks to annotate.
- mode (string, optional): Execution mode: local, aws, or azure.
- output_dir (string, optional): Directory to write audit_program.json.
Bundled Files
- main.py: executable logic for the skill.
- README.md: detailed usage, examples, role IDs, and output expectations.
- skill.yaml: existing repo manifest retained for this project's original packaging.
Guidance
- Prefer the repo's documented role IDs from README.md instead of guessing role names.
- Use the generated audit_program.json as the source of truth for downstream evidence and reporting skills.
- If the user does not specify roles or frameworks, state the assumptions you use.