prowler-compliance-review
This skill streamlines pull request reviews for compliance framework updates by validating JSON syntax, checking for duplicate requirement IDs, and ensuring framework metadata completeness. It applies a structured checklist covering file location, changelog fragments, and dashboard patterns to catch issues before merge.
Prowler Compliance Review automates pull request validation for compliance framework additions and modifications.
AI-generated summary based on this skill's SKILL.md
Install
prowler-cloud/prowler/prowler-compliance-review · repository language: Python
git clone https://github.com/prowler-cloud/prowler
cp -r prowler/skills/prowler-compliance-review ~/.claude/skills/prowler-compliance-reviewnpx skillfed install prowler-cloud/prowler/prowler-compliance-reviewFrequently asked questions
AI-generated answers based on this skill's SKILL.md and metadata
What does prowler-compliance-review do?
prowler-compliance-review streamlines pull request reviews for compliance framework updates by validating JSON syntax, checking for duplicate requirement IDs, and ensuring framework metadata completeness. It applies a structured checklist covering file location, changelog fragments, and dashboard patterns to catch issues before merge.
Can prowler-compliance-review validate compliance JSON structure?
Yes. prowler-compliance-review validates compliance JSON structure and metadata as a core function, ensuring that CIS, NIST, and PCI-DSS framework files conform to expected syntax and format requirements before changes are merged into the repository.
How does prowler-compliance-review check for duplicate compliance requirement IDs?
prowler-compliance-review detects errors in CIS/NIST/PCI-DSS framework additions by checking for duplicate compliance requirement IDs. This validation prevents conflicting identifiers that could cause framework conflicts or data integrity issues.
Does prowler-compliance-review automate compliance framework PR review?
Yes. prowler-compliance-review automates PR review for compliance framework changes, enforcing quality standards through structured validation. It streamlines the compliance framework review workflow by catching structural, metadata, and requirement issues automatically.
What compliance frameworks does prowler-compliance-review support?
prowler-compliance-review validates changes across CIS, NIST, and PCI-DSS compliance frameworks. It ensures that additions and modifications to these frameworks meet quality standards and structural requirements before being merged.
Is prowler-compliance-review open source?
Yes. prowler-compliance-review is licensed under Apache-2.0, making it open source and available for community use and contribution.
SKILL.md
rendered from the published skill — quoted content, verbatim
When to Use
- Reviewing PRs that add new compliance frameworks
- Reviewing PRs that modify existing compliance frameworks
- Validating compliance framework JSON structure before merge
Review Checklist (Critical)
| Check | Command/Method | Pass Criteria |
|---|---|---|
| JSON Valid | python3 -m json.tool file.json |
No syntax errors |
| All Checks Exist | Run validation script | 0 missing checks |
| No Duplicate IDs | Run validation script | 0 duplicate requirement IDs |
| Changelog fragment | Manual review | Fragment present under prowler/changelog.d/ |
| Dashboard File | Compare with existing | Follows established pattern |
| Framework Metadata | Manual review | All required |
(truncated - see the full file via the links below)
Read as markdown · JSON record · Browse the source repository
File tree — 3 files
skills/prowler-compliance-review/SKILL.md
skills/prowler-compliance-review/assets/validate_compliance.py
skills/prowler-compliance-review/references/review-checklist.md