Compliance Validator Skill

Validates compliance requirements during migration activities, checking rules, generating audit trails, and verifying security controls.

Purpose

Enable compliance verification for:

• Compliance rule checking
• Audit trail generation
• Security control validation
• Policy enforcement
• Gap analysis

Capabilities

1. Compliance Rule Checking

• Check against frameworks (SOC2, HIPAA, PCI)
• Verify organizational policies
• Validate technical controls
• Flag violations

2. Audit Trail Generation

• Log migration activities
• Track changes
• Document approvals
• Preserve evidence

3. Security Control Validation

• Verify encryption
• Check access controls
• Validate logging
• Test security measures

4. Policy Enforcement

• Apply security policies
• Enforce standards
• Block violations
• Alert on issues

5. Compliance Report Generation

• Generate audit reports
• Document controls
• Track remediation
• Produce evidence

6. Gap Analysis

• Identify compliance gaps
• Prioritize remediation
• Track closure
• Report progress

Tool Integrations

Tool	Purpose	Integration Method
AWS Config	AWS compliance	API
Azure Policy	Azure compliance	API
Chef InSpec	Infrastructure testing	CLI
OPA	Policy as code	CLI
Prowler	Security auditing	CLI
ScoutSuite	Multi-cloud audit	CLI

Output Schema

{
  "validationId": "string",
  "timestamp": "ISO8601",
  "frameworks": ["SOC2", "HIPAA"],
  "results": {
    "passed": "number",
    "failed": "number",
    "notApplicable": "number"
  },
  "controls": [
    {
      "id": "string",
      "framework": "string",
      "status": "passed|failed|na",
      "evidence": "string",
      "remediation": "string"
    }
  ],
  "auditTrail": {
    "location": "string",
    "entries": "number"
  }
}

Integration with Migration Processes

• cloud-migration: Cloud compliance
• security-remediation-migration: Security compliance

Related Skills

• vulnerability-scanner: Security scanning

Related Agents

• compliance-migration-agent: Compliance orchestration
• security-vulnerability-assessor: Security assessment