Policy Gap Review Assistant

What this skill does

Compares draft policies against expected policy sections, ownership, responsibilities, control requirements, evidence needs, review cycles, approval routes, training requirements, implementation plans, monitoring expectations and governance gaps across HR, finance, IT, compliance, risk, operations, data protection, security and internal control environments.

• Review
• Drafting
• Compliance
• Agensi

Where it runs, and how to install it

Agent Skills are a format, not a product feature: a folder with a SKILL.md and whatever files it needs. Nothing inside one is model-specific.

Claude

Drop the skill folder into ~/.claude/skills/, or upload it in Settings → Capabilities. Claude loads it when the description matches what you asked for.

Claude Code

Same folder, per-project instead: .claude/skills/ inside the repository, so the skill travels with the work rather than with the machine.

Any agent that reads SKILL.md

A skill is a folder with a SKILL.md and whatever files it needs. Nothing in the format is model-specific, so a runtime that reads the file reads the skill.

More from PromptWagon

• Audit Evidence Request BuilderCreates audit PBC lists, evidence request emails, document trackers, follow-up wording, request prioritisation, ownership logs, status summaries, escalation language and audit-ready evidence collection templates for internal audit, external audit, compliance reviews, assurance teams, risk teams and professional services engagements.
• Contract Obligation ExtractorTurns contract text, clauses, schedules, service agreements, supplier terms, procurement documents and renewal notes into clear obligation lists, deadlines, responsibilities, notice periods, renewal points, reporting duties, evidence needs, monitoring actions, risk flags and contract follow-up trackers for procurement, legal, operations, compliance, finance and contract management teams.
• Internal Control Narrative BuilderTurns process notes, walkthrough summaries, policy extracts, procedure descriptions and audit planning notes into clear internal control narratives, process summaries, risk-control matrices, walkthrough questions, control descriptions, testing prompts, evidence requests and documentation QA checks for auditors, compliance teams, governance teams, finance teams and risk professionals.
• Supplier Due Diligence PackCreates supplier due diligence questionnaires, third-party risk checks, onboarding summaries, approval notes, evidence requests, review schedules, risk ratings, monitoring actions and supplier governance packs for procurement, compliance, finance, operations, legal, IT, information security and vendor management teams.

Skills that do related work

• Audit Evidence Request BuilderCreates audit PBC lists, evidence request emails, document trackers, follow-up wording, request prioritisation, ownership logs, status summaries, escalation lan
• Compliance Marking ChecklistGenerates market-specific compliance and labeling checklists for 3C electronics exports.
• EU AI Act High-Risk AssessorClassify AI systems against Article 6 and Annex III, then generate a legal-review-ready risk memo, high-risk obligations map, Annex IV documentation gaps and An
• Nex COPPA 2026 PackAudit and generate compliance documentation for the 2026 FTC COPPA Rule amendments.
• Nex US Privacy MultistateAutomated US multi-state privacy compliance engine for threshold mapping, policy generation and DSR workflows.
• Privacy Policy GeneratorGuide for drafting privacy policies compliant with GDPR. Includes CNIL 2020 recommendations, a reference template, and best practices. Use when drafting or revi