prowler-compliance-review
This skill streamlines pull request reviews for compliance framework updates by validating JSON syntax, checking for duplicate requirement IDs, and ensuring framework metadata completeness. It applies a structured checklist covering file location, changelog fragments, and dashboard patterns to catch issues before merge.
Prowler Compliance Review automates pull request validation for compliance framework additions and modifications.
AI-generated summary based on this skill's SKILL.md
Decision gist · record as of 2026-07-27
Prowler Compliance Review automates pull request validation for compliance framework additions and modifications. This skill streamlines pull request reviews for compliance framework updates by validating JSON syntax, checking for duplicate requirement IDs, and ensuring framework metadata completeness. It applies a structured checklist covering file location, changelog fragments, and dashboard patterns to catch issues before merge.
Use it when
- Yes.
- prowler-compliance-review detects errors in CIS/NIST/PCI-DSS framework additions by checking for duplicate compliance requirement IDs.
Verify before relying
Read SKILL.md below before installing (3 files). Open directory: indexed for reading, not audited.
Install
prowler-cloud/prowler/prowler-compliance-review · repository language: Python
Open directory. Skills are indexed for reading, not audited. Review a skill's body before installing it.
Frequently asked questions
AI-generated answers based on this skill's SKILL.md and metadata
What does prowler-compliance-review do?
prowler-compliance-review streamlines pull request reviews for compliance framework updates by validating JSON syntax, checking for duplicate requirement IDs, and ensuring framework metadata completeness. It applies a structured checklist covering file location, changelog fragments, and dashboard patterns to catch issues before merge.
Can prowler-compliance-review validate compliance JSON structure?
Yes. prowler-compliance-review validates compliance JSON structure and metadata as a core function, ensuring that CIS, NIST, and PCI-DSS framework files conform to expected syntax and format requirements before changes are merged into the repository.
How does prowler-compliance-review check for duplicate compliance requirement IDs?
prowler-compliance-review detects errors in CIS/NIST/PCI-DSS framework additions by checking for duplicate compliance requirement IDs. This validation prevents conflicting identifiers that could cause framework conflicts or data integrity issues.
Does prowler-compliance-review automate compliance framework PR review?
Yes. prowler-compliance-review automates PR review for compliance framework changes, enforcing quality standards through structured validation. It streamlines the compliance framework review workflow by catching structural, metadata, and requirement issues automatically.
What compliance frameworks does prowler-compliance-review support?
prowler-compliance-review validates changes across CIS, NIST, and PCI-DSS compliance frameworks. It ensures that additions and modifications to these frameworks meet quality standards and structural requirements before being merged.
Is prowler-compliance-review open source?
Yes. prowler-compliance-review is licensed under Apache-2.0, making it open source and available for community use and contribution.
SKILL.md
Rendered from the published skill. Quoted content, verbatim.
When to Use
- Reviewing PRs that add new compliance frameworks
- Reviewing PRs that modify existing compliance frameworks
- Validating compliance framework JSON structure before merge
Review Checklist (Critical)
| Check | Command/Method | Pass Criteria |
|---|---|---|
| JSON Valid | python3 -m json.tool file.json |
No syntax errors |
| All Checks Exist | Run validation script | 0 missing checks |
| No Duplicate IDs | Run validation script | 0 duplicate requirement IDs |
| Changelog fragment | Manual review | Fragment present under prowler/changelog.d/ |
| Dashboard File | Compare with existing | Follows established pattern |
| Framework Metadata | Manual review | All required |
(truncated - see the full file via the links below)
File tree — 3 files
skills/prowler-compliance-review/SKILL.md
skills/prowler-compliance-review/assets/validate_compliance.py
skills/prowler-compliance-review/references/review-checklist.md
Let your AI agent find skills like this
Example. Real query, live index.
You found this page by searching. An agent finds it by wishing: SkillFed indexes 56,283 agent skills by what they can do, searchable in plain language.
wish › “Automate PR review for compliance framework changes”
Give your agent the search over MCP, or paste the wish link into any chat. No install? Search from any chat →
Related skills
This skill handles end-to-end compliance framework authoring, from choosing between universal (multi-provider, zero Python code) or legacy (single-provider, existing families) schemas to syncing with upstream sources, mapping checks to controls, and fixing JSON bugs. Use it when creating new frameworks, adding ConfigRequirements guardrails, auditing check mappings, or troubleshooting compliance output in the UI.
Prowler-changelog automates changelog management across UI, API, MCP Server, and SDK components using a fragment-based system that prevents merge conflicts on concurrent PRs. Each change gets its own fragment file under `changelog.d/` directories, which compile into versioned `CHANGELOG.md` files at release time. The skill enforces semantic versioning rules, validates fragment format, and requires explicit confirmation before any changelog edits.
prowler-ci guides you through Prowler's CI and PR gate system, helping diagnose why GitHub Actions workflows fail. It covers PR title validation, changelog requirements, conflict marker detection, and secret scanning—with a quick reference map to key workflow files and a practical debug checklist.
skill-sync maintains AGENTS.md auto-invoke sections by reading skill metadata and regenerating action-to-skill mappings. Run the sync script after creating or modifying skills to automatically update all affected AGENTS.md files across your repository scopes.
Prowler-provider guides you through adding new cloud providers or services to the Prowler SDK. It provides the required directory structure, class templates for providers and services, and patterns for handling authentication and CLI arguments securely.
Prowler-docs provides the authoring standards and formatting conventions for creating consistent Prowler documentation. It covers brand voice principles, markdown formatting, SEO best practices, and MDX component usage across feature docs, tutorials, API references, and compliance guides.
More skills prowler-test-sdk (Apache-2.0) · django-migration-psql (Apache-2.0)