Can I use this for specific audit preparations?

Yes, it supports specific frameworks like SOC2, HIPAA, and ISO27001 through specialized routing and the ability to save custom analysis criteria.

Does it track progress over time?

Yes, it performs historical comparisons against previous reports in your workspace to show closed gaps, new issues, and the age of unresolved items.

How does it handle complex requests like 'security and compliance'?

The skill uses natural language intent parsing to route tasks to multiple specialized agents in parallel, aggregating all findings into a single, unified report.

Where are the analysis reports stored?

Reports are generated as structured Markdown files within the .aiwg/reports/ directory of your project for easy versioning and review.

What types of gaps can this skill detect?

It identifies gaps in security (vulnerabilities), compliance (SOC2/GDPR), traceability (missing requirements), test coverage, and workspace health.

Unified SDLC Gap Analysis

Name: Unified SDLC Gap Analysis
Author: jmagly

byjmagly

•

102

•

安全与测试

Conducts comprehensive gap analysis across security, compliance, and test coverage using specialized AI agents.

The Gap Analysis skill serves as a central intelligence hub for software project health, automatically routing natural language queries to specialized sub-agents for security assessments, compliance validation, and requirement traceability. It aggregates disparate findings into a normalized severity matrix, compares current results against historical data to track progress, and generates actionable remediation roadmaps to ensure release readiness and audit compliance. By integrating with specialized roles like security architects and requirements analysts, it provides a high-level executive view of project risks and technical debt.

主要功能

01Customizable analysis criteria for specific frameworks like SOC2, HIPAA, or ISO27001

02Historical delta calculation to track new, closed, and unchanged issues over time

03102 GitHub stars

04Automated generation of prioritized remediation roadmaps and executive summaries

05Unified gap matrix with normalized severity classification and stable ID tracking

06Natural language routing to specialized security, compliance, and testing agents

使用场景

01Assessing release readiness by identifying missing requirements or untested critical code paths

02Preparing for regulatory audits with automated compliance validation and artifact checks

03Monitoring long-term project health through historical trending and gap age tracking

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add jmagly/aiwg gap-analysis

For use in Claude.ai and ChatGPT