Audit Evidence Collection and Readiness Agent

What this skill does

Maps audit requests to internal controls, identifies required supporting evidence, organizes records from approved sources, detects missing, stale, incomplete, or conflicting artifacts, validates period and scope coverage and prepares review-ready audit packages without modifying authoritative source records. It creates request-to-control mappings, control-to-evidence matrices, PBC trackers, evidence indexes, gap registers, remediation trackers, provenance records and reviewer-ready packages while preserving traceability, confidentiality and evidence integrity.

• Review
• Audit
• Agensi

Where it runs, and how to install it

Agent Skills are a format, not a product feature: a folder with a SKILL.md and whatever files it needs. Nothing inside one is model-specific.

Claude

Drop the skill folder into ~/.claude/skills/, or upload it in Settings → Capabilities. Claude loads it when the description matches what you asked for.

Claude Code

Same folder, per-project instead: .claude/skills/ inside the repository, so the skill travels with the work rather than with the machine.

Any agent that reads SKILL.md

A skill is a folder with a SKILL.md and whatever files it needs. Nothing in the format is model-specific, so a runtime that reads the file reads the skill.

More from Shandra

• AI-to-Human Handoff Context PackagerCreates complete, evidence-rich, decision-ready context packages for transferring risky, ambiguous, exceptional, unresolved, or authority-restricted cases from an AI agent to the correct human specialist. Preserves the user's actual objective, verified facts, consulted data, completed checks, executed actions, previous responses, confidence level, policy or exception context, risks, deadlines, escalation reason, required human decision and recommended next action while minimizing repetition and unnecessary sensitive-data exposure.
• Contract Obligation Tracking AgentConverts complex contracts into structured registers with deadlines, owners, service levels and renewal logic.
• Customer Complaint De-Escalation AgentAnalyzes angry, frustrated, disappointed, or emotionally charged customer complaints and produces calm, empathetic, policy-compliant responses while detecting churn, refund, chargeback, legal, regulatory, reputational, privacy, safety, discrimination, fraud and executive-escalation risks. It preserves prior contacts and commitments, separates verified facts from allegations, prevents unsupported admissions and overpromising, reduces repeated customer effort and determines when supervisors or specialist teams must intervene.
• GDPR Contract Review Triage AgentReviews contracts and DPAs for GDPR-related triage issues, extracts obligations, flags missing clauses, creates risk tables and generates legal-review checklists.

Skills that do related work

• Audit Evidence Request BuilderCreates audit PBC lists, evidence request emails, document trackers, follow-up wording, request prioritisation, ownership logs, status summaries, escalation lan
• Medical & Pharma AI Compliance GateAudit AI-assisted medical and pharma content for compliance-readiness before it enters formal MLR review or journal submission. It checks claim substantiation a
• Open-Source Software License and Copyleft Risk ReviewAudits software licenses: CycloneDX SBOM scanning, copyleft contamination elimination and automated third-party notices.
• Regulatory Compliance Audit and Control Design ReviewAudits regulatory compliance: PCI-DSS v4.0 tokenization, GDPR Article 32 security and 365-day immutable audit trails.
• 🔐 Security Questionnaire Answer Drift AuditorCompare incoming security questionnaire answers with an approved library for stale evidence, scope mismatch, dropped citations and material wording drift.
• Agentic Delegation AuditUse when a lawyer, legal team, or client needs to assess AI agents that can act on someone's behalf: send messages, search, draft, file, pay, delete, connect to