Skip to content
Get packs

SOC 2 Type II Audit Prep

Pressure-tests SOC 2 Type II audit readiness with six forcing questions and a status report

Source Download skill
Repository
alirezarezvani/claude-skills
Stars
29,149
Licence
MIT
Files
1 file

What it does

When installed, the agent acts like a tough SOC 2 auditor reviewing your compliance program. It asks six pointed questions about scope, control gaps during the observation period, mid-period changes, exception logging, evidence timing, and overlap with ISO 27001. It then produces a structured readiness report with a traffic-light verdict and three recommended next actions. It is a checklist and interrogation aid, not a substitute for an auditor or a compliance lawyer.

Great for

  • Engineering or compliance leads preparing for a SOC 2 Type II audit
  • Teams running a mid-observation-period checkpoint who want to find evidence gaps early
  • Companies pursuing both SOC 2 and ISO 27001 who want to reuse evidence

Skip it if

  • Organisations seeking a formal audit opinion: the skill gives guidance only and the report is not an auditor's attestation
  • SOC 2 Type I or other frameworks not covered by the six questions, since the content is specific to Type II observation periods
  • Teams expecting it to verify evidence automatically: the SKILL.md describes checks but the agent still relies on the data you supply

Try asking

  • “/compliance-os:soc2-audit-prep for our SaaS platform, Security and Availability in scope, we are in month 6”
  • “Run the six SOC 2 Type II forcing questions before our observation period starts”
  • “Check whether any quarterly access reviews were skipped during our observation period”
  • “Map our SOC 2 controls to ISO 27001 and show which evidence can be reused”
Step-by-step guide: how to use SOC 2 Type II Audit PrepInstall, first run, examples, tips and FAQs

Install in 3 steps

  1. 1

    Download the skill

    The ZIP contains the 1 original files, the MIT licence and an attribution note.

    soc2-audit-prep.zip
  2. 2

    Add it to your agent

    Claude Code (all projects)

    mkdir -p ~/.claude/skills && unzip soc2-audit-prep.zip -d ~/.claude/skills/

    Claude Code / Agent SDK (this project only)

    mkdir -p .claude/skills && unzip soc2-audit-prep.zip -d .claude/skills/

    Claude apps (web/desktop): Settings → Capabilities → Skills → Upload skill, and choose the ZIP.

  3. 3

    Ask for the task

    No special command needed — the agent reads the skill's description and loads it when your request matches. Try one of the prompts above.

Get better results

  • Provide accurate JSON inputs (scope, evidence log, exception log) before running, since the report is only as reliable as the data you give it
  • Review the referenced scripts before execution, because the workflow runs them on your local files
  • Use the mid-period checkpoint and month-10 readiness runs to catch gaps while there is still time to remediate

What's inside

  • SKILL.md

Redistributed unmodified from alirezarezvani/claude-skills under the MIT licence. The assessment was drafted with AI from the skill's files on 2026-10-29. Skills can instruct your agent to run code — read SKILL.md and any scripts before installing.