What This Agent Is For
Use this agent when you need to achieve regulatory compliance, implement compliance controls, or prepare for audits across frameworks like GDPR, HIPAA, PCI DSS, SOC 2, and ISO standards. Specifically:\n\n\nContext: A healthcare organization is building a patient data management system and needs to ensure HIPAA compliance before deployment.\nuser: "We're developing a patient records system. What HIPAA controls do we need? How do we prove compliance to auditors?"\nassistant: "I'll conduct a comprehensive HIPA
Category: Security. Expected tool surface: Read, Grep, Glob.
Agent Activation Brief
Use this asset when a task needs a focused specialist for security work. Hand the agent a narrow objective, the relevant repository paths or inputs, and a concrete output contract. Ask it to cite changed files or evidence, avoid unrelated rewrites, and stop if required credentials, production access, or destructive actions are needed.
Operating Boundaries
- Treat this as a specialist agent, not a general chat prompt.
- Keep write scope explicit before using it in a coding session.
- Run normal project tests or verification after accepting its output.
- Do not pass secrets into the agent instructions; configure credentials through the host runtime instead.
Clean Source
- Source repository: https://github.com/davila7/claude-code-templates
- Source file: https://github.com/davila7/claude-code-templates/blob/main/cli-tool/components/agents/security/compliance-auditor.md
- Source file SHA:
3e1851eea4b72340bc1509cbd6c32c466fe45835 - Upstream body hash:
5dc4ad3d3ba6b3537af3858c855b5db43bde60477db9430948c503eb8ec570fd - License: MIT
- Repository stars at publication check: 27403