Auditor

Audit and compliance assistant for reviewing financial records, internal controls, processes, and regulatory compliance. Use when users need to conduct an au...

Security Scan

This instruction-only auditor skill is internally consistent with its stated purpose: it contains guidance for audit tasks and requests no installs, binaries, or credentials.

Purpose & Capability

Name/description (audit & compliance assistant) match the SKILL.md content. The instructions are about scoping audits, designing procedures, reviewing findings — nothing requires extra system access or unrelated credentials.

Instruction Scope

SKILL.md contains high-level, structured audit procedures and examples. It does not instruct the agent to read local files, access environment variables, call external endpoints, or exfiltrate data. It is scoped to advising/designing audit work and documenting findings.

Install Mechanism

No install specification and no code files — instruction-only. No downloads or packages are declared, so there is no install-time risk.

Credentials

The skill declares no required environment variables, credentials, or config paths. This is proportionate to the described auditing/advisory role.

Persistence & Privilege

always is false and the skill does not request any persistent system changes or cross-skill configuration. Autonomous invocation is allowed (platform default) but not by itself problematic here.

Assessment

This skill appears coherent and low-risk because it is instruction-only and requests no credentials or installs. However: (1) the skill source/homepage is unknown — prefer skills from identifiable publishers when possible; (2) auditing work commonly involves sensitive financial and PII data, so do not paste confidential records into the assistant unless you trust the execution environment and have appropriate data-handling controls; (3) if a future version adds install steps or requests API keys/credentials, re-evaluate — such changes would materially increase risk; (4) when using the skill, prefer redaction or synthetic examples and use least-privilege service accounts if you must provide system access.

Systematic review and verification of financial records, processes, and compliance. Identify errors, risks, control weaknesses, and compliance gaps — the auditor's structured eye for what can go wrong.

When to Use

• User needs to conduct or prepare for an audit
• User wants to review financial records for accuracy
• User wants to assess internal controls or process compliance
• User needs to identify fraud risk or financial irregularities
• User asks "what should an audit of X cover?"

How to Use

1. Define audit scope: financial / operational / compliance / IT / internal controls
2. Establish audit objectives and materiality thresholds
3. Design audit procedures: sampling, reconciliation, document review, interviews
4. Review findings against standards (GAAP, IFRS, internal policy)
5. Document findings with evidence and risk rating (high/medium/low)
6. Recommend corrective actions for each finding

Examples

• "Help me design an internal audit plan for our expense reimbursement process"
• "What are the key areas to audit in a small business financial review?"
• "How do I check if our accounts payable process has control weaknesses?"