soc2-compliance
by alirezarezvani (GitHub) in alirezarezvani/claude-skills
What it does
Use when the user asks to prepare for SOC 2 audits, map Trust Service Criteria, build control matrices, collect audit evidence, perform gap analysis, or assess SOC 2 Type I vs Type II readiness.
Quoted from the skill's SKILL.md under its MIT license.
Install
git clone --depth 1 https://github.com/alirezarezvani/claude-skills.git /tmp/claude-skills mkdir -p ~/.claude/skills/ cp -r /tmp/claude-skills/ra-qm-team/skills/soc2-compliance ~/.claude/skills/soc2-compliance
The command copies the skill from the author's repo. SkillTrove does not host it.
Files
- SKILL.md
- references/evidence_collection_guide.md
- references/soc2_audit_playbook.md
- references/trust_service_criteria.md
- references/type1_vs_type2.md
- scripts/control_matrix_builder.py
- scripts/evidence_tracker.py
- scripts/gap_analyzer.py
Source: https://github.com/alirezarezvani/claude-skills/tree/main/ra-qm-team/skills/soc2-compliance. Checked 2026-10-13.
Similar skills
doubt-driven-development
Subjects every non-trivial decision to a fresh-context adversarial review before it stands. Use when you want every assumption cross-examined before proceedi...
security-and-hardening
Hardens code against vulnerabilities. Use when auditing an input handler for vulnerabilities, when handling user input, authentication, data storage, or exte...
supabase
Use when doing ANY task involving Supabase. Triggers: Supabase products (Database, Auth, Edge Functions, Realtime, Storage, Vectors, Cron, Queues); client li...
a11y-audit
Accessibility audit skill for scanning, fixing, and verifying WCAG 2.2 Level A and AA compliance across React, Next.js, Vue, Angular, Svelte, and plain HTML ...
aeo
Answer Engine Optimization (AEO) skill - optimize content to be cited by AI language models (ChatGPT, Perplexity, Claude, Gemini, Mistral) as authoritative...
ai-security
Use when assessing AI/ML systems for prompt injection, jailbreak vulnerabilities, model inversion risk, data poisoning exposure, or agent tool abuse. Covers ...