compliance-audit-pro

v1.0.0

面向法律/财务/采购场景的合规审计引擎,自动提取风险条款、映射法规基线、生成审计底稿与澄清模板

0· 76·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for boboy-j/compliance-audit-pro.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "compliance-audit-pro" (boboy-j/compliance-audit-pro) from ClawHub.
Skill page: https://clawhub.ai/boboy-j/compliance-audit-pro
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install compliance-audit-pro

ClawHub CLI

Package manager switcher

npx clawhub@latest install compliance-audit-pro
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
The name/description (合规审计) matches the SKILL.md parameters and workflow: it only needs document_content and compliance_scope to produce mapped risk reports. There are no unrelated required env vars, binaries, or config paths.
Instruction Scope
The SKILL.md only instructs the agent to parse the provided document_content, map to the provided compliance_scope, grade risk, and output a markdown report. It does not direct reading of system files, other env vars, or exfiltration to external endpoints. The README explicitly recommends redacting sensitive amounts/names before processing.
Install Mechanism
No install spec and no code files — instruction-only skill. That limits on-disk execution of third-party code and is low-risk from an install perspective.
Credentials
The skill declares no required environment variables, credentials, or config paths. Nothing requests broad or unrelated secrets.
Persistence & Privilege
always is false and there is no install behavior that would persist or modify other skills or system settings. Normal autonomous invocation by the agent is allowed (platform default).
Assessment
This skill appears coherent and low-risk from a platform/security perspective, but it will process whatever contract text you provide. Before using it: (1) avoid sending confidential PII or unredacted client/financial details — redact sensitive fields; (2) treat outputs as preliminary analysis, not formal legal advice — have law/controls teams verify; (3) note the package source is unknown (no homepage/owner provenance), so prefer testing with non-sensitive examples first; (4) review your LLM provider's data retention/privacy policy because document contents will be seen by whatever model/service the agent uses.

Like a lobster shell, security has layers — review code before you run it.

latestvk97ab2f4h4gc2zwgf84424wny5852w4w
76downloads
0stars
1versions
Updated 1w ago
v1.0.0
MIT-0

⚖️ 合规与内控审计助手

🎯 核心定位

将非结构化业务文本转化为可追溯、可审计、可落地的合规风险矩阵与整改清单。

🔄 工作流指令

  1. 识别义务:识别文档类型与核心义务条款(资质/付款/违约/数据/交付)。
  2. 法规映射:逐条映射 compliance_scope 法规基线,标注法条编号与原文对照。
  3. 风险评估:评估风险等级:🔴禁止性条款/🟡限制性条款/🟢提示性条款。
  4. 底稿生成:生成标准化审计底稿,包含偏离说明模板、澄清话术、整改责任矩阵。
  5. 输出报告:按标准 Markdown 模板输出结构化审计报告。

📤 输出模板

# 🛡️ 合规审计报告

## 1. 风险条款映射表
| 原文条款摘要 | 对应法规 | 风险等级 | 合规状态 | 应对建议 |
|:---|:---|:---|:---|:---|
| ... | 《...》第X条 | 🔴/🟡/🟢 | 合规/偏离/待确认 | ... |

## 2. 审计底稿草案
- **事实描述**:...
- **法规依据**:...
- **偏离说明模板**:[直接复制至正式回函]
- **整改责任人/时限**:...

## 3. 澄清与谈判建议
- 高风险项:建议发起书面答疑/补充协议
- 中风险项:建议内部评审后附条件接受
- 低风险项:常规备案即可
> 📌 本结果基于公开法规库生成,重大合规决策需经法务/内控部门复核。

Comments

Loading comments...