‹ 首页

compliance-audit

@wellapp-ai · 收录于 5 天前 · 上游提交 1 个月前

Audit Value Delivery compliance after PR push

场景代码评审合规检查

适合你，如果需要在PR合并后自动检查合规要求

/ 下载安装
https://github.com/wellapp-ai/well/tree/main/cursor-rules/skills/compliance-audit ↗
/ 通过 npx 安装 校验哈希
npx oh-my-skill add wellapp-ai/well/compliance-audit
/ 通过 bash 安装
curl -fsSL https://oh-my-skill.com/install.sh | bash -s -- wellapp-ai/well/compliance-audit
/ 已经装过?验证本机副本,不用重装
npx oh-my-skill verify wellapp-ai/well/compliance-audit
安装目标可用 --agent / --scope 或 --to 明确指定;省略时只会在唯一已存在的 agent 目录上自动选择,零命中或多命中会停止并提示。content_hash 缺失或不一致均拒装。
340GitHub stars
~672上下文体积 · 单文件
索引托管

怎么用

商店整理自技能原文 · 版本 782601c · 表述以原文为准
它做什么

推送 PR 后自动或手动收集会话数据（提交数、文件数等），检查 PR 阈值（代码行数、文件数等）和流程差距（如会话头尾、审查格式等），生成合规报告表格并记录日志。

什么时候触发

PR 推送后自动触发（push-pr 模式），或用户手动说“use compliance-audit skill”时，或在审查会话质量时触发。

装好后可以这样说
审计当前会话的合规性。
生成合规报告。
检查 PR 阈值和流程差异。
技能原文 SKILL.md作者撰写 · MIT · 782601c

Compliance Audit Skill

Run after PR push to verify Value Delivery rules were followed during the session.

When to Use
  • After PR is pushed (invoke from push-pr mode)
  • Manually with "use compliance-audit skill"
  • When reviewing session quality
Phase 1: Gather Session Data

Collect data from the current session:

| Data Point | Source | |------------|--------| | Commit count | git rev-list origin/develop..HEAD --count | | Files changed | git diff origin/develop --name-only \| wc -l | | Lines of code | git diff origin/develop --stat \| tail -1 | | console.log presence | Grep in changed files |

Phase 2: Check Compliance Requirements
2.1 PR Threshold Check

| Metric | Current | Threshold | Status | |--------|---------|-----------|--------| | Lines of Code | [N] | 300 | OK/CROSSED ([X]x) | | Files Changed | [N] | 10 | OK/CROSSED ([X]x) | | Commits | [N] | 5 | OK/CROSSED ([X]x) | | console.log | [N] | 0 | OK/CROSSED |

Verdict: [PASSED / TRIGGER_PR - Should have pushed earlier PRs]

2.2 Gaps Identified

| Requirement | Expected | Actual | Status | |-------------|----------|--------|--------| | Session Headers/Footers | Every response | [Count] | Done/Missing | | pr-review skill format | Full report | [Format] | Done/Partial/Missing | | qa-commit skill format | Full criteria table | [Format] | Done/Partial/Missing | | pr-threshold checks | After each commit | [Count] | Done/Partial/Missing | | Risk Assessment | Calculate score | [Done/Not] | Done/Missing | | Storybook stories | For new components | [Count] | Done/Missing | | Design system check | Before new patterns | [Done/Not] | Done/Partial/Missing | | Satisfies field in commits | Every commit | [Count] | Done/Missing | | Typecheck/Lint | Before commits | [Done/Not] | Done/Missing |

Phase 3: Generate Compliance Report
## Value Delivery Compliance Audit

### PR Threshold Check

| Metric | Current | Threshold | Status |
|--------|---------|-----------|--------|
| Lines of Code | [N] | 300 | [status] |
| Files Changed | [N] | 10 | [status] |
| Commits | [N] | 5 | [status] |
| console.log | [N] | 0 | [status] |

**Verdict:** [PASSED / TRIGGER_PR]

### Gaps Identified

| Requirement | Expected | Actual | Status |
|-------------|----------|--------|--------|
| [requirement] | [expected] | [actual] | [status] |
...

### Recommendations

[List any improvements for next session]
Phase 4: Log to Session Journal

If using Notion sync, add compliance report to Session Journal entry.

Output Format

The audit should produce a table matching the format shown in the user's compliance screenshot, with clear CROSSED indicators for threshold violations and status icons for gap analysis.

Integration

This skill is invoked by:

  • push-pr.mdc - After PR is created (Phase 4)
  • Manual invocation for retrospective
Invocation

Invoked automatically after PR push, or manually with "use compliance-audit skill".

按 MIT 许可原样转载,未经改动 · 在 GitHub 查看 →

评论

登录即可评论;带「已验证安装」的,是发布者名下有本店的安装或持有记录。
…