Show HN: SOC2 Auditor Skill

Category: security

Tags: compliance, audit, ai-agent, soc2, python

Score: 7.0/10 (Innovation: 7, Technical: 7, Documentation: 8, Utility: 6)

soc2-auditor is an agent skill that automates AI-driven SOC 2 Type 1/Type 2 audit simulations by pulling evidence from compliance platforms, testing controls against Trust Services Criteria, and generating a signed PDF report. It separates deterministic Python scripts (hashing, sampling, validation, rendering) from agent-based judgment, ensuring reproducibility and auditability. The project is notable for its vendor-agnostic Agent Skills format and rigorous eval framework.

Target audience: compliance teams, security engineers, devops, auditors

Repository: https://github.com/heychristoph/soc2-auditor · Python · MIT · 3 stars

View on Hacker News