← 返回 Skills 市场

compliance-audit-pro

Name: compliance-audit-pro
Author: boboy-j

作者 boboy-j · GitHub ↗ · v1.0.0 · MIT-0

cross-platform ✓ 安全检测通过

总下载

当前安装

版本数

在 OpenClaw 中安装

/install compliance-audit-pro

功能描述

面向法律/财务/采购场景的合规审计引擎，自动提取风险条款、映射法规基线、生成审计底稿与澄清模板

使用说明 (SKILL.md)

⚖️ 合规与内控审计助手

🎯 核心定位

将非结构化业务文本转化为可追溯、可审计、可落地的合规风险矩阵与整改清单。

🔄 工作流指令

识别义务：识别文档类型与核心义务条款（资质/付款/违约/数据/交付）。
法规映射：逐条映射 compliance_scope 法规基线，标注法条编号与原文对照。
风险评估：评估风险等级：🔴禁止性条款/🟡限制性条款/🟢提示性条款。
底稿生成：生成标准化审计底稿，包含偏离说明模板、澄清话术、整改责任矩阵。
输出报告：按标准 Markdown 模板输出结构化审计报告。

📤 输出模板

# 🛡️ 合规审计报告

## 1. 风险条款映射表
| 原文条款摘要 | 对应法规 | 风险等级 | 合规状态 | 应对建议 |
|:---|:---|:---|:---|:---|
| ... | 《...》第X条 | 🔴/🟡/🟢 | 合规/偏离/待确认 | ... |

## 2. 审计底稿草案
- **事实描述**：...
- **法规依据**：...
- **偏离说明模板**：[直接复制至正式回函]
- **整改责任人/时限**：...

## 3. 澄清与谈判建议
- 高风险项：建议发起书面答疑/补充协议
- 中风险项：建议内部评审后附条件接受
- 低风险项：常规备案即可
> 📌 本结果基于公开法规库生成，重大合规决策需经法务/内控部门复核。

安全使用建议

This skill appears coherent and low-risk from a platform/security perspective, but it will process whatever contract text you provide. Before using it: (1) avoid sending confidential PII or unredacted client/financial details — redact sensitive fields; (2) treat outputs as preliminary analysis, not formal legal advice — have law/controls teams verify; (3) note the package source is unknown (no homepage/owner provenance), so prefer testing with non-sensitive examples first; (4) review your LLM provider's data retention/privacy policy because document contents will be seen by whatever model/service the agent uses.

功能分析

Type: OpenClaw Skill Name: compliance-audit-pro Version: 1.0.0 The compliance-audit-pro skill is a legitimate text-processing tool designed for legal and financial document auditing. Analysis of SKILL.md, schema.json, and examples.json shows no evidence of malicious intent, data exfiltration, or unauthorized system access. The instructions are strictly limited to analyzing provided text against regulatory frameworks and generating structured reports, with no indicators of prompt injection attacks or hidden malicious payloads.

能力评估

✓ Purpose & Capability

The name/description (合规审计) matches the SKILL.md parameters and workflow: it only needs document_content and compliance_scope to produce mapped risk reports. There are no unrelated required env vars, binaries, or config paths.

✓ Instruction Scope

The SKILL.md only instructs the agent to parse the provided document_content, map to the provided compliance_scope, grade risk, and output a markdown report. It does not direct reading of system files, other env vars, or exfiltration to external endpoints. The README explicitly recommends redacting sensitive amounts/names before processing.

✓ Install Mechanism

No install spec and no code files — instruction-only skill. That limits on-disk execution of third-party code and is low-risk from an install perspective.

✓ Credentials

The skill declares no required environment variables, credentials, or config paths. Nothing requests broad or unrelated secrets.

✓ Persistence & Privilege

always is false and there is no install behavior that would persist or modify other skills or system settings. Normal autonomous invocation by the agent is allowed (platform default).

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install compliance-audit-pro
安装完成后，直接呼叫该 Skill 的名称或使用 /compliance-audit-pro 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.0

Initial release of compliance-audit-pro – an automated compliance audit engine for legal, finance, and procurement scenarios. - Extracts risk clauses and maps them to specified compliance baselines and laws. - Supports automated risk assessment with configurable thresholds (low/medium/high/strict). - Generates standardized audit workpapers, clarification templates, and compliance reports in Markdown format. - Compatible with OpenClaw, Dify, Coze, and SkillHub platforms.

元数据

Slug compliance-audit-pro

版本 1.0.0

许可证 MIT-0

累计安装 0

当前安装数 0

历史版本数 1

常见问题