[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M6H9KSVEGP3SPW1P5DF4R0XK":3,"skill-same:01M6H9KSVEGP3SPW1P5DF4R0XK":112},{"skillNo":4,"name":5,"nameZh":6,"description":7,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":15,"categories":16,"keywords":22,"publishedAt":43,"linkOnly":44,"markdownContent":45,"markdownBody":46,"frontMatter":47,"refName":53,"commitSha":54,"skillDirectory":55,"forksCount":56,"repositoryHtmlUrl":57,"repositoryHomepageUrl":6,"ownerHtmlUrl":58,"ownerBlogUrl":6,"ownerDescription":6,"updatedAt":59,"install":60,"resources":73},"01M6H9KSVEGP3SPW1P5DF4R0XK","assisting-with-soc2-audit-preparation",null,"Execute automate SOC 2 audit preparation including evidence gathering, control assessment, and compliance gap identification.\nUse when you need to prepare for SOC 2 audits, assess Trust Service Criteria compliance, document security controls, or generate readiness reports.\nTrigger with phrases like \"SOC 2 audit preparation\", \"SOC 2 readiness assessment\", \"collect SOC 2 evidence\", or \"Trust Service Criteria compliance\".","micsapp\u002Fmicstec-skills","micsapp","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F82411001?v=4","01M6GWCFQ6D3PV8EHNY62NN5VW","01M6GWCFVE1PA5HG0DKC7AMFJ3",4,"MIT","https:\u002F\u002Fgithub.com\u002Fmicsapp\u002Fmicstec-skills\u002Fblob\u002Fmaster\u002Fclaude-code\u002Fplugins-plus-skills\u002Fplugins\u002Fsecurity\u002Fsoc2-audit-helper\u002Fskills\u002Fassisting-with-soc2-audit-preparation\u002FSKILL.md",[17],{"categoryNo":18,"categoryName":19,"taxonomyType":20,"taxonomyTypeDesc":21},"01JBSEEDCAT000000000000037","律师与法务","PROFESSION","适用职业",[23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42],"audit","preparation","audit preparation","with","Assisting with SOC2 Audit Preparation","soc2","Bash","use","evidence","document","trust","trigger","identification","controls","assess","soc","you","collect","for","assessment","2026-11-10 10:12:30",false,"---\nname: assisting-with-soc2-audit-preparation\ndescription: |\n  Execute automate SOC 2 audit preparation including evidence gathering, control assessment, and compliance gap identification.\n  Use when you need to prepare for SOC 2 audits, assess Trust Service Criteria compliance, document security controls, or generate readiness reports.\n  Trigger with phrases like \"SOC 2 audit preparation\", \"SOC 2 readiness assessment\", \"collect SOC 2 evidence\", or \"Trust Service Criteria compliance\".\n  \nallowed-tools: Read, Write, Edit, Grep, Glob, Bash(audit-collect:*), Bash(compliance-check:*)\nversion: 1.0.0\nauthor: Jeremy Longshore \u003Cjeremy@intentsolutions.io>\nlicense: MIT\ncompatible-with: claude-code, codex, openclaw\n---\n# Assisting With SOC 2 Audit Preparation\n\n## Overview\n\nAutomate SOC 2 Type I and Type II audit preparation by assessing controls across the five AICPA Trust Service Criteria (Security, Availability, Processing Integrity, Confidentiality, Privacy). Inventory existing controls and evidence, perform gap analysis against each Common Criteria point (CC1-CC9), and produce an audit-ready evidence package with a readiness score and remediation backlog.\n\n## Prerequisites\n\n- Policy and procedure documentation accessible in `${CLAUDE_SKILL_DIR}\u002Fdocs\u002F` (information security policy, incident response plan, BCP\u002FDR plan, vendor management procedures)\n- Infrastructure-as-code and configuration files available for control verification\n- Cloud provider audit logs accessible (AWS CloudTrail, Azure Activity Log, GCP Audit Logs) or exported\n- Employee onboarding\u002Foffboarding and security awareness training records available\n- Change management and access review logs accessible\n- Write permissions for audit workspace in `${CLAUDE_SKILL_DIR}\u002Fsoc2-audit\u002F`\n\n## Instructions\n\n1. **Define audit scope**: confirm in-scope services, systems, data stores, and audit period (Type I: point-in-time; Type II: observation window, typically 3-12 months). Identify applicable Trust Service Categories beyond the required Security criteria.\n2. **Assess CC1 -- Control Environment**: verify organizational structure documentation, security policy, board oversight, and security role\u002Fresponsibility matrix. Check for gaps in documented accountability.\n3. **Assess CC6 -- Logical and Physical Access Controls**: verify MFA implementation, RBAC policies, password policy enforcement, access review cadence, and automated deprovisioning. Flag privileged access without monitoring.\n4. **Assess CC7 -- System Operations**: check monitoring and alerting configurations, backup procedures and testing records, incident response logs, and capacity planning documentation.\n5. **Assess CC8 -- Change Management**: review change approval workflows, deployment pipelines, rollback procedures, and change logs for the audit period.\n6. **Collect evidence artifacts**: organize evidence into the standard directory structure under `${CLAUDE_SKILL_DIR}\u002Fsoc2-audit\u002F` with subdirectories per criteria (CC1-control-environment\u002F, CC6-access-controls\u002F, CC7-system-operations\u002F, etc.).\n7. **Test control effectiveness**: for each control, verify design adequacy (properly designed?) and operating effectiveness (working as intended during the audit period?). Document test results with screenshots, log excerpts, or configuration exports.\n8. **Perform gap analysis**: classify findings as missing controls (critical gap), partially implemented controls (needs improvement), improperly documented controls (evidence gap), or ineffective controls (design\u002Foperating failure).\n9. **Generate readiness report**: produce `${CLAUDE_SKILL_DIR}\u002Fsoc2-audit\u002Freadiness-report-YYYYMMDD.md` with overall readiness score, per-criteria assessment with percentage, remediation roadmap with timelines, and evidence collection checklist.\n10. **Prepare auditor interview guide**: draft expected auditor questions by criteria area with suggested evidence references and talking points.\n\nSee `${CLAUDE_SKILL_DIR}\u002Freferences\u002Fimplementation.md` for the six-phase implementation guide. See `${CLAUDE_SKILL_DIR}\u002Freferences\u002Freadiness-by-trust-service-category.md` for example per-criteria readiness breakdowns.\n\n## Output\n\n- **Readiness Report**: `${CLAUDE_SKILL_DIR}\u002Fsoc2-audit\u002Freadiness-report-YYYYMMDD.md` with overall score and per-criteria pass\u002Fgap status\n- **Evidence Inventory**: organized artifact list mapped to specific CC control points\n- **Gap Analysis**: missing and partially implemented controls with severity and remediation priority\n- **Remediation Backlog**: prioritized tasks with effort estimates, owners, and target dates\n- **Auditor Interview Guide**: expected questions by criteria with evidence pointers\n\n## Error Handling\n\n| Error | Cause | Solution |\n|-------|-------|----------|\n| Cannot locate security policy in `${CLAUDE_SKILL_DIR}\u002Fdocs\u002F` | Documentation stored elsewhere or not yet created | Request document locations; flag as critical evidence gap requiring immediate creation |\n| Log retention \u003C SOC 2 requirement (1 year) | Insufficient log retention configuration | Note current retention period; flag as gap; recommend extending to 12+ months |\n| No incident response playbook found | Undocumented procedure | Flag as critical gap; provide template for creating IR playbook |\n| Cannot assess cloud controls without API access | No CloudTrail\u002FAudit Log exports available | Request console screenshots or JSON exports as alternative evidence |\n| Production and dev configs mixed in `${CLAUDE_SKILL_DIR}\u002F` | Environment separation unclear | Request environment labeling; risk of auditing wrong environment |\n\n## Examples\n\n- \"Prepare a SOC 2 evidence checklist for Security and Availability criteria for production systems.\"\n- \"Generate a readiness gap analysis with remediation backlog for SOC 2 Type II, covering CC1 through CC9.\"\n- \"Assess CC6 access control compliance: verify MFA, RBAC, deprovisioning, and privileged access monitoring.\"\n\n## Resources\n\n- AICPA Trust Service Criteria (2017): https:\u002F\u002Fwww.aicpa.org\u002Finterestareas\u002Ffrc\u002Fassuranceadvisoryservices\u002Ftrustdataintegritytaskforce.html\n- SOC 2 Compliance Checklist: https:\u002F\u002Fsecureframe.com\u002Fhub\u002Fsoc-2\u002Fchecklist\n- CIS Controls v8: https:\u002F\u002Fwww.cisecurity.org\u002Fcontrols\u002F\n- NIST Cybersecurity Framework: https:\u002F\u002Fwww.nist.gov\u002Fcyberframework\n- `${CLAUDE_SKILL_DIR}\u002Freferences\u002Freadiness-by-trust-service-category.md` -- example per-criteria readiness breakdown\n- `${CLAUDE_SKILL_DIR}\u002Freferences\u002Ferrors.md` -- full error handling reference\n- `${CLAUDE_SKILL_DIR}\u002Freferences\u002Fexamples.md` -- additional usage examples\n- https:\u002F\u002Fintentsolutions.io","# Assisting With SOC 2 Audit Preparation\n\n## Overview\n\nAutomate SOC 2 Type I and Type II audit preparation by assessing controls across the five AICPA Trust Service Criteria (Security, Availability, Processing Integrity, Confidentiality, Privacy). Inventory existing controls and evidence, perform gap analysis against each Common Criteria point (CC1-CC9), and produce an audit-ready evidence package with a readiness score and remediation backlog.\n\n## Prerequisites\n\n- Policy and procedure documentation accessible in `${CLAUDE_SKILL_DIR}\u002Fdocs\u002F` (information security policy, incident response plan, BCP\u002FDR plan, vendor management procedures)\n- Infrastructure-as-code and configuration files available for control verification\n- Cloud provider audit logs accessible (AWS CloudTrail, Azure Activity Log, GCP Audit Logs) or exported\n- Employee onboarding\u002Foffboarding and security awareness training records available\n- Change management and access review logs accessible\n- Write permissions for audit workspace in `${CLAUDE_SKILL_DIR}\u002Fsoc2-audit\u002F`\n\n## Instructions\n\n1. **Define audit scope**: confirm in-scope services, systems, data stores, and audit period (Type I: point-in-time; Type II: observation window, typically 3-12 months). Identify applicable Trust Service Categories beyond the required Security criteria.\n2. **Assess CC1 -- Control Environment**: verify organizational structure documentation, security policy, board oversight, and security role\u002Fresponsibility matrix. Check for gaps in documented accountability.\n3. **Assess CC6 -- Logical and Physical Access Controls**: verify MFA implementation, RBAC policies, password policy enforcement, access review cadence, and automated deprovisioning. Flag privileged access without monitoring.\n4. **Assess CC7 -- System Operations**: check monitoring and alerting configurations, backup procedures and testing records, incident response logs, and capacity planning documentation.\n5. **Assess CC8 -- Change Management**: review change approval workflows, deployment pipelines, rollback procedures, and change logs for the audit period.\n6. **Collect evidence artifacts**: organize evidence into the standard directory structure under `${CLAUDE_SKILL_DIR}\u002Fsoc2-audit\u002F` with subdirectories per criteria (CC1-control-environment\u002F, CC6-access-controls\u002F, CC7-system-operations\u002F, etc.).\n7. **Test control effectiveness**: for each control, verify design adequacy (properly designed?) and operating effectiveness (working as intended during the audit period?). Document test results with screenshots, log excerpts, or configuration exports.\n8. **Perform gap analysis**: classify findings as missing controls (critical gap), partially implemented controls (needs improvement), improperly documented controls (evidence gap), or ineffective controls (design\u002Foperating failure).\n9. **Generate readiness report**: produce `${CLAUDE_SKILL_DIR}\u002Fsoc2-audit\u002Freadiness-report-YYYYMMDD.md` with overall readiness score, per-criteria assessment with percentage, remediation roadmap with timelines, and evidence collection checklist.\n10. **Prepare auditor interview guide**: draft expected auditor questions by criteria area with suggested evidence references and talking points.\n\nSee `${CLAUDE_SKILL_DIR}\u002Freferences\u002Fimplementation.md` for the six-phase implementation guide. See `${CLAUDE_SKILL_DIR}\u002Freferences\u002Freadiness-by-trust-service-category.md` for example per-criteria readiness breakdowns.\n\n## Output\n\n- **Readiness Report**: `${CLAUDE_SKILL_DIR}\u002Fsoc2-audit\u002Freadiness-report-YYYYMMDD.md` with overall score and per-criteria pass\u002Fgap status\n- **Evidence Inventory**: organized artifact list mapped to specific CC control points\n- **Gap Analysis**: missing and partially implemented controls with severity and remediation priority\n- **Remediation Backlog**: prioritized tasks with effort estimates, owners, and target dates\n- **Auditor Interview Guide**: expected questions by criteria with evidence pointers\n\n## Error Handling\n\n| Error | Cause | Solution |\n|-------|-------|----------|\n| Cannot locate security policy in `${CLAUDE_SKILL_DIR}\u002Fdocs\u002F` | Documentation stored elsewhere or not yet created | Request document locations; flag as critical evidence gap requiring immediate creation |\n| Log retention \u003C SOC 2 requirement (1 year) | Insufficient log retention configuration | Note current retention period; flag as gap; recommend extending to 12+ months |\n| No incident response playbook found | Undocumented procedure | Flag as critical gap; provide template for creating IR playbook |\n| Cannot assess cloud controls without API access | No CloudTrail\u002FAudit Log exports available | Request console screenshots or JSON exports as alternative evidence |\n| Production and dev configs mixed in `${CLAUDE_SKILL_DIR}\u002F` | Environment separation unclear | Request environment labeling; risk of auditing wrong environment |\n\n## Examples\n\n- \"Prepare a SOC 2 evidence checklist for Security and Availability criteria for production systems.\"\n- \"Generate a readiness gap analysis with remediation backlog for SOC 2 Type II, covering CC1 through CC9.\"\n- \"Assess CC6 access control compliance: verify MFA, RBAC, deprovisioning, and privileged access monitoring.\"\n\n## Resources\n\n- AICPA Trust Service Criteria (2017): https:\u002F\u002Fwww.aicpa.org\u002Finterestareas\u002Ffrc\u002Fassuranceadvisoryservices\u002Ftrustdataintegritytaskforce.html\n- SOC 2 Compliance Checklist: https:\u002F\u002Fsecureframe.com\u002Fhub\u002Fsoc-2\u002Fchecklist\n- CIS Controls v8: https:\u002F\u002Fwww.cisecurity.org\u002Fcontrols\u002F\n- NIST Cybersecurity Framework: https:\u002F\u002Fwww.nist.gov\u002Fcyberframework\n- `${CLAUDE_SKILL_DIR}\u002Freferences\u002Freadiness-by-trust-service-category.md` -- example per-criteria readiness breakdown\n- `${CLAUDE_SKILL_DIR}\u002Freferences\u002Ferrors.md` -- full error handling reference\n- `${CLAUDE_SKILL_DIR}\u002Freferences\u002Fexamples.md` -- additional usage examples\n- https:\u002F\u002Fintentsolutions.io",{"name":5,"author":48,"license":14,"version":49,"description":50,"allowed-tools":51,"compatible-with":52},"Jeremy Longshore \u003Cjeremy@intentsolutions.io>","1.0.0","Execute automate SOC 2 audit preparation including evidence gathering, control assessment, and compliance gap identification.\nUse when you need to prepare for SOC 2 audits, assess Trust Service Criteria compliance, document security controls, or generate readiness reports.\nTrigger with phrases like \"SOC 2 audit preparation\", \"SOC 2 readiness assessment\", \"collect SOC 2 evidence\", or \"Trust Service Criteria compliance\".\n","Read, Write, Edit, Grep, Glob, Bash(audit-collect:*), Bash(compliance-check:*)","claude-code, codex, openclaw","master","3f5d983eb4ef375b749adcd6b07ec03bd82ae8a8","claude-code\u002Fplugins-plus-skills\u002Fplugins\u002Fsecurity\u002Fsoc2-audit-helper\u002Fskills\u002Fassisting-with-soc2-audit-preparation",0,"https:\u002F\u002Fgithub.com\u002Fmicsapp\u002Fmicstec-skills","https:\u002F\u002Fgithub.com\u002Fmicsapp","2026-03-20 11:24:18",{"source":8,"skillName":5,"commands":61,"prompt":71,"zipAvailable":72},[62,65,68],{"tool":63,"command":64},"npx","npx skills add micsapp\u002Fmicstec-skills --skill assisting-with-soc2-audit-preparation",{"tool":66,"command":67},"bunx","bunx skills add micsapp\u002Fmicstec-skills --skill assisting-with-soc2-audit-preparation",{"tool":69,"command":70},"pnpm","pnpm dlx skills add micsapp\u002Fmicstec-skills --skill assisting-with-soc2-audit-preparation","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002Fmicsapp\u002Fmicstec-skills\u002Fblob\u002Fmaster\u002Fclaude-code\u002Fplugins-plus-skills\u002Fplugins\u002Fsecurity\u002Fsoc2-audit-helper\u002Fskills\u002Fassisting-with-soc2-audit-preparation\u002FSKILL.md",true,[74,80,86,90,94,98,102,108],{"path":75,"resourceType":76,"resourceTypeDesc":77,"sizeBytes":78,"sourceHtmlUrl":79},"assets\u002FREADME.md","ASSET","资产文件",308,"https:\u002F\u002Fgithub.com\u002Fmicsapp\u002Fmicstec-skills\u002Fblob\u002Fmaster\u002Fclaude-code\u002Fplugins-plus-skills\u002Fplugins\u002Fsecurity\u002Fsoc2-audit-helper\u002Fskills\u002Fassisting-with-soc2-audit-preparation\u002Fassets\u002FREADME.md",{"path":81,"resourceType":82,"resourceTypeDesc":83,"sizeBytes":84,"sourceHtmlUrl":85},"references\u002Ferrors.md","REFERENCE","参考文档",1124,"https:\u002F\u002Fgithub.com\u002Fmicsapp\u002Fmicstec-skills\u002Fblob\u002Fmaster\u002Fclaude-code\u002Fplugins-plus-skills\u002Fplugins\u002Fsecurity\u002Fsoc2-audit-helper\u002Fskills\u002Fassisting-with-soc2-audit-preparation\u002Freferences\u002Ferrors.md",{"path":87,"resourceType":82,"resourceTypeDesc":83,"sizeBytes":88,"sourceHtmlUrl":89},"references\u002Fexamples.md",179,"https:\u002F\u002Fgithub.com\u002Fmicsapp\u002Fmicstec-skills\u002Fblob\u002Fmaster\u002Fclaude-code\u002Fplugins-plus-skills\u002Fplugins\u002Fsecurity\u002Fsoc2-audit-helper\u002Fskills\u002Fassisting-with-soc2-audit-preparation\u002Freferences\u002Fexamples.md",{"path":91,"resourceType":82,"resourceTypeDesc":83,"sizeBytes":92,"sourceHtmlUrl":93},"references\u002Fimplementation.md",3112,"https:\u002F\u002Fgithub.com\u002Fmicsapp\u002Fmicstec-skills\u002Fblob\u002Fmaster\u002Fclaude-code\u002Fplugins-plus-skills\u002Fplugins\u002Fsecurity\u002Fsoc2-audit-helper\u002Fskills\u002Fassisting-with-soc2-audit-preparation\u002Freferences\u002Fimplementation.md",{"path":95,"resourceType":82,"resourceTypeDesc":83,"sizeBytes":96,"sourceHtmlUrl":97},"references\u002Freadiness-by-trust-service-category.md",897,"https:\u002F\u002Fgithub.com\u002Fmicsapp\u002Fmicstec-skills\u002Fblob\u002Fmaster\u002Fclaude-code\u002Fplugins-plus-skills\u002Fplugins\u002Fsecurity\u002Fsoc2-audit-helper\u002Fskills\u002Fassisting-with-soc2-audit-preparation\u002Freferences\u002Freadiness-by-trust-service-category.md",{"path":99,"resourceType":82,"resourceTypeDesc":83,"sizeBytes":100,"sourceHtmlUrl":101},"references\u002FREADME.md",61,"https:\u002F\u002Fgithub.com\u002Fmicsapp\u002Fmicstec-skills\u002Fblob\u002Fmaster\u002Fclaude-code\u002Fplugins-plus-skills\u002Fplugins\u002Fsecurity\u002Fsoc2-audit-helper\u002Fskills\u002Fassisting-with-soc2-audit-preparation\u002Freferences\u002FREADME.md",{"path":103,"resourceType":104,"resourceTypeDesc":105,"sizeBytes":106,"sourceHtmlUrl":107},"scripts\u002Fgenerate_soc2_report.py","SCRIPT","脚本",3671,"https:\u002F\u002Fgithub.com\u002Fmicsapp\u002Fmicstec-skills\u002Fblob\u002Fmaster\u002Fclaude-code\u002Fplugins-plus-skills\u002Fplugins\u002Fsecurity\u002Fsoc2-audit-helper\u002Fskills\u002Fassisting-with-soc2-audit-preparation\u002Fscripts\u002Fgenerate_soc2_report.py",{"path":109,"resourceType":104,"resourceTypeDesc":105,"sizeBytes":110,"sourceHtmlUrl":111},"scripts\u002FREADME.md",564,"https:\u002F\u002Fgithub.com\u002Fmicsapp\u002Fmicstec-skills\u002Fblob\u002Fmaster\u002Fclaude-code\u002Fplugins-plus-skills\u002Fplugins\u002Fsecurity\u002Fsoc2-audit-helper\u002Fskills\u002Fassisting-with-soc2-audit-preparation\u002Fscripts\u002FREADME.md",[113,147,177,197,217,242],{"skillNo":114,"name":115,"nameZh":6,"description":116,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":117,"categories":118,"keywords":127,"publishedAt":43},"01M6HBTJ02FXBFG9NYEHHYAP52","azure-apim-architecture","Analyzes and explains Azure API Management architecture decisions for enterprise API marketplace implementations using VNet Internal mode, Front Door, hybrid authentication, and multi-environment strategies. Use when discussing APIM component selection, network topology, cost optimization, or comparing alternatives like workspaces vs instances, VNet Internal vs External mode, or Front Door vs Application Gateway.","https:\u002F\u002Fgithub.com\u002Fmicsapp\u002Fmicstec-skills\u002Fblob\u002Fmaster\u002Fcopilot-cli\u002Fcopilot-agent-skills\u002F.github\u002Fskills\u002Fazure-apim-architecture\u002FSKILL.md",[119,124],{"categoryNo":120,"categoryName":121,"taxonomyType":122,"taxonomyTypeDesc":123},"01JBSEEDCAT000000000000010","后端与接口","SCENARIO","使用场景",{"categoryNo":125,"categoryName":126,"taxonomyType":20,"taxonomyTypeDesc":21},"01JBSEEDCAT000000000000030","开发工程师",[128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,41],"architecture","azure","azure apim architecture","component","authentication","gateway","topology","Optimization","network","api","team","environment","multi-environment","workspaces","instances","selection","strategies","azure api management","mode",{"skillNo":148,"name":149,"nameZh":6,"description":150,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":151,"categories":152,"keywords":161,"publishedAt":43},"01M6HBT7J4H082JEEA670B3EQ9","apiops-deployment","Guides deployment of Azure API Management infrastructure using Infrastructure as Code (Bicep\u002FTerraform), CI\u002FCD pipelines (GitHub Actions\u002FAzure DevOps), and APIOps workflows. Use when deploying APIM, creating pipelines, or implementing dev→test→prod promotion strategies.","https:\u002F\u002Fgithub.com\u002Fmicsapp\u002Fmicstec-skills\u002Fblob\u002Fmaster\u002Fcopilot-cli\u002Fcopilot-agent-skills\u002F.github\u002Fskills\u002Fapiops-deployment\u002FSKILL.md",[153,154,157,160],{"categoryNo":120,"categoryName":121,"taxonomyType":122,"taxonomyTypeDesc":123},{"categoryNo":155,"categoryName":156,"taxonomyType":122,"taxonomyTypeDesc":123},"01JBSEEDCAT000000000000011","运维与部署",{"categoryNo":158,"categoryName":159,"taxonomyType":122,"taxonomyTypeDesc":123},"01JBSEEDCAT000000000000023","Skill与智能体开发",{"categoryNo":125,"categoryName":126,"taxonomyType":20,"taxonomyTypeDesc":21},[162,163,164,165,129,166,167,168,169,170,171,172,137,138,144,173,174,145,175,176],"deployment","apiops deployment","workflows","azure devops","infrastructure","code","infrastructure as code","actions","ci","github actions","github-actions","as","guides","CI\u002FCD","implementing",{"skillNo":178,"name":179,"nameZh":6,"description":180,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":181,"categories":182,"keywords":184,"publishedAt":43},"01M6HBT2HEA23THNE9E00GYQBE","apim-policy-authoring","Creates production-ready Azure API Management policy XML for authentication (OAuth 2.0, JWT validation, subscription keys), rate limiting, CORS configuration, error handling, and API transformations. Use when implementing API security, access control, or request\u002Fresponse processing logic.","https:\u002F\u002Fgithub.com\u002Fmicsapp\u002Fmicstec-skills\u002Fblob\u002Fmaster\u002Fcopilot-cli\u002Fcopilot-agent-skills\u002F.github\u002Fskills\u002Fapim-policy-authoring\u002FSKILL.md",[183],{"categoryNo":120,"categoryName":121,"taxonomyType":122,"taxonomyTypeDesc":123},[185,186,187,188,129,132,137,138,189,30,190,191,192,193,194,145,195,196,176,41],"policy","authoring","apim policy authoring","security","access","ready","api security","Access Control","error","processing","cors configuration","production-ready",{"skillNo":198,"name":199,"nameZh":6,"description":200,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":201,"categories":202,"keywords":205,"publishedAt":43},"01M6HBSY65SB29J9WE9KYD0K6T","api-security-review","Reviews Azure API Management configurations for security vulnerabilities, OWASP API Security Top 10 compliance, VNet Internal mode validation, Private Link verification, and Azure Security Benchmark alignment. Use when performing security audits, pre-deployment validation, or compliance reviews.","https:\u002F\u002Fgithub.com\u002Fmicsapp\u002Fmicstec-skills\u002Fblob\u002Fmaster\u002Fcopilot-cli\u002Fcopilot-agent-skills\u002F.github\u002Fskills\u002Fapi-security-review\u002FSKILL.md",[203,204],{"categoryNo":120,"categoryName":121,"taxonomyType":122,"taxonomyTypeDesc":123},{"categoryNo":125,"categoryName":126,"taxonomyType":20,"taxonomyTypeDesc":21},[206,188,207,137,191,208,129,162,209,210,211,212,138,213,145,214,215,216,146,41],"review","security review","api security review","benchmark","verification","owasp","owasp-api","alignment","azure security","reviews","top",{"skillNo":218,"name":219,"nameZh":6,"description":220,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":221,"categories":222,"keywords":223,"publishedAt":43},"01M6HBSRW4PDFE6K4F8JYPZQ05","jira-cli","Interact with Jira from the command line to create, list, view, edit, and transition issues, manage sprints and epics, and perform common Jira workflows. Use when the user asks about Jira tasks, tickets, issues, sprints, or needs to manage project work items.","https:\u002F\u002Fgithub.com\u002Fmicsapp\u002Fmicstec-skills\u002Fblob\u002Fmaster\u002Fcopilot-cli\u002Fawesome-copilot-agents\u002Fskills\u002Fjira-cli\u002FSKILL.md",[],[224,225,226,164,227,228,229,230,137,231,232,233,234,235,236,237,238,239,240,241],"cli","jira","jira cli","init","tasks","create","issues","common","work","command","edit","list","view","project","project work","token","line","sprints",{"skillNo":243,"name":244,"nameZh":6,"description":245,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":246,"categories":247,"keywords":248,"publishedAt":43},"01M6HBSNS3JHMW603G47TWE31H","calculator","Performs arbitrary-precision arithmetic calculations including addition, subtraction, multiplication, division, and exponents. Use when the user asks to calculate, compute, or evaluate math expressions, or when precise decimal arithmetic is needed to avoid floating-point errors.","https:\u002F\u002Fgithub.com\u002Fmicsapp\u002Fmicstec-skills\u002Fblob\u002Fmaster\u002Fcopilot-cli\u002Fawesome-copilot-agents\u002Fskills\u002Fcalculator\u002FSKILL.md",[],[244,249,250,251,252,253,254,30,255,256],"npm","js","calculate","node","math","user","compute","errors"]