governance-cite
Look up governance controls and their justifications via the governance CLI, to ground a recommendation in a real standard (NIST, OWASP, ISO, SOC 2, CIS, IEEE). Use when you need the control IDs and justification text behind a practice. Not for deciding whether to cite or how to phrase it — that's the governance citation way.
- License 许可
- AGPL-3.0
- 最近更新
- 2026-11-11
- Stars
- ★ 26
- Forks
- 13
01 前言 Front Matter
- name
- governance-cite
- description
- Look up governance controls and their justifications via the governance CLI, to ground a recommendation in a real standard (NIST, OWASP, ISO, SOC 2, CIS, IEEE). Use when you need the control IDs and justification text behind a practice. Not for deciding whether to cite or how to phrase it — that's the governance citation way.
- allowed-tools
- Bash, Read, Grep, Glob
03 SKILL.md 正文
Governance Citation Lookup
A governance traceability system maps agent guidance (ways) to the regulatory controls their guidance claims to address, each with asserted justifications — control-design claims, not evidence the control operates. This skill is the lookup — run it to fetch the control IDs and justification text behind a practice. For when to cite and how to phrase it, see the governance citation way.
Look up controls
By topic
ways-audit control PATTERN # e.g. NIST, OWASP, ISO, SOC, CIS, change
By way (full trace)
ways-audit trace softwaredev/commits
ways-audit trace softwaredev/security
Machine-readable
ways-audit control PATTERN --json
ways-audit trace WAY --json
ways-audit matrix --json # the complete traceability matrix
Read the governed ways and controls from the data — run ways-audit matrix for the current set. Never cite from memory; provenance changes.
Not for
- Deciding whether to cite, or how to phrase a citation — that's the governance citation way.
- The full coverage/provenance report — that's the governance skill (
ways-audit report).
04 同仓库更多 Skills
my-skill
A hand-built skill the user keeps in ~/.claude/skills. The fixture asserts it survives the install.
work-skill
A skill in a second Claude Code config directory. The fixture asserts the directory is untouched.
wrap
Wrap up a session at a natural seam — land in-flight work, square the TaskList honestly, write a copy-paste continuation prompt, then hand off to a directed /compact. Use when the user says "wrap up", "wrap this up", "let's wrap", "end of session", "checkpoint and compact", "hand off", or invokes /wrap.
ways-update
Update the agent-ways installation to the latest version — preview the update with `ways manage update --what-if` (versions, release notes, the commits, local changes, the actions, dev links), read it back to the user, then apply it with `ways manage update --commit`, which pulls the app source in $XDG_DATA, refreshes the binaries and corpus, and reprojects ~/.claude. Use when the user wants to update agent-ways, pull the latest ways/hooks, or refresh their ways framework install. Not for editing or authoring individual ways (that is the ways skill) or upgrading project dependencies.
ways-tests
Score way matching via embedding similarity, analyze vocabulary, and validate frontmatter. Use when testing how well a way matches prompts, checking cosine similarity scores, inspecting the embedding engine status, or validating way files.
ways-localize
Localize agent-ways into the operator's language — translate every way's matching metadata against the English root, tune it clean, and switch ways (and Claude Code) into that language. Use when the operator asks to run ways in their language ("set up ways in Spanish", "localiza ways al español", "ways auf Deutsch"). Not for authoring or editing individual ways (that is the ways skill), not for English installs (already built), and not for changing Claude Code's language alone (that is a settings.json edit).