What is the SDLC Gap Analysis skill?

It is a specialized capability for Claude Code that identifies missing requirements, security vulnerabilities, and coverage gaps by coordinating multiple specialized AI agents.

Does it support custom analysis criteria?

Yes, it can detect custom parameters in your requests and offers to save them as YAML criteria files for consistent, repeatable future analyses.

How does it handle compliance frameworks like SOC2?

The skill identifies compliance-related keywords and routes the analysis to privacy and compliance agents that validate the codebase against specific framework controls.

What kind of output does it provide?

It generates a detailed Markdown report located in your workspace, featuring an executive summary, a prioritized gap matrix, and a remediation roadmap.

Can I track gap remediation over time?

Yes, the skill automatically detects previous reports in your workspace to calculate deltas, showing which gaps have been closed and which remain outstanding.

SDLC Gap Analysis

Name: SDLC Gap Analysis
Author: jmagly

byjmagly

•

セキュリティとテスト

Performs automated gap analysis across security, compliance, and test coverage to identify missing project requirements and vulnerabilities.

The SDLC Gap Analysis skill serves as a unified orchestration layer for comprehensive project audits within the Claude Code environment. It utilizes natural language processing to interpret complex analysis requests—ranging from SOC2 compliance readiness to test coverage assessments—and routes them to specialized sub-agents. By aggregating findings into a standardized matrix and comparing results against historical data, it provides developers and stakeholders with actionable remediation roadmaps and trend visualizations, significantly reducing the manual effort required for project oversight and quality assurance.

主な機能

01Multi-agent coordination for parallel gap discovery across specialized domains

02Automated historical comparison to track new, closed, and aging gaps

03Natural language intent routing for security, compliance, and traceability targets

0467 GitHub stars

05Prioritized remediation roadmaps with specific action items and owner suggestions

06Unified gap matrix with normalized severity classification and stable IDs

ユースケース

01Automating the tracking of technical debt and security vulnerabilities over the project lifecycle

02Validating requirement traceability and test coverage before major release transitions

03Preparing for regulatory audits such as SOC2, HIPAA, or GDPR by identifying compliance gaps

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add jmagly/ai-writing-guide gap-analysis

For use in Claude.ai and ChatGPT

Download Skill