ComplianceAsCodeComplianceAsCode/content/.claude/skills/inspect-control/SKILL.md

inspect-control

Skill2.8k starsChanged 51 days agoLicence not identifiedView on GitHub

Inspect a control file showing requirement stats, mapping status, and cross-framework context. Use for triage before mapping.

Feb 13, 2025Install VMs with FIPS of bootable containers — RHSecurityCompliance/contest2 reactions
Aug 13, 2026PatchMon v2.1.0 SSG content Download — community-scripts/ProxmoxVE1 reaction
Jul 30, 2026feat: Add initial NIST 800-53 artifacts for RHEL8, RHEL9, RHEL10 and Fedora — complytime/complytime-policies1 reaction · 4 comments
May 12, 2026common: Disable empty password authentication via authselect without-nullok — coreos/rhel-coreos-config1 reaction · 2 comments
May 11, 2026Remove two waivers - (syslog.conf is active) and (hipaa/.*kauditd) — RHSecurityCompliance/contest1 reaction

45 more on GitHub

Apr 10, 2026Remove outdated waiver for ensure_redhat_gpgkey_installed — RHSecurityCompliance/contest1 reaction
Oct 17, 2025Remove waivers for ISM O — RHSecurityCompliance/contest1 reaction
Jul 14, 2025Remove waiver for productization issue #13550 — RHSecurityCompliance/contest1 reaction
Mar 25, 2025Filter updated control files — ComplianceAsCode/content-test-filtering1 reaction · 7 comments
Oct 11, 2024Introduce bootc remediation type — OpenSCAP/openscap1 reaction
Jan 31, 2024Change rule prodtype search and make tests more content change proof — ComplianceAsCode/content-test-filtering1 reaction · 1 comment
Apr 4, 2023Traceback when using certain namespace prefixes — Shoobx/xmldiff1 reaction · 3 comments
Mar 24, 2023Improve xccdf_results_mapper when converting XCCDF Results to HDF Results — mitre/heimdall21 reaction · 26 comments
Aug 8, 2022Add clone3 to seccomp profile syscalls — gitpod-io/gitpod1 reaction · 7 comments
Oct 13, 2021Patch the `segfault` in dpkginfo_fini() — OpenSCAP/openscap1 reaction · 2 comments
Jan 28, 2020Use urn:xccdf:fix:script:ignition remediations instead of pretend ignition in bash — openshift/compliance-operator1 reaction · 23 comments
Nov 6, 2026Revert "Removing outdated waiver for closed content issue 15132" — RHSecurityCompliance/contest0 reactions
Nov 2, 2026Enable tests for IEC 62443-4-2 profile for RHEL 9 — RHSecurityCompliance/contest0 reactions · 1 comment
Nov 1, 2026fix(cli): scope CIS mapping to verified edition — profullstack/threatcrush0 reactions · 1 comment
Oct 29, 2026Enable cui enhanced testing — RHSecurityCompliance/contestsays it tested it0 reactions · 5 comments
Oct 29, 2026CentOS Stream fixes (base64 repos, openscap-1.3.10) — RHSecurityCompliance/contest0 reactions · 1 comment
Oct 28, 2026chore(deps): update compliance-operator-content-release-1-10 to 6dfc486 — ComplianceAsCode/compliance-operator0 reactions · 6 comments
Oct 20, 2026Task: the appliance OS hardened to CIS Ubuntu Level 1 — the scanner, the build settings, the "not applicable" list and the exception list — evoila/meho0 reactions · 2 comments
Oct 9, 2026Removing outdated waiver for closed content issue 15132 — RHSecurityCompliance/contest0 reactions
Oct 6, 2026Remove outdated waiver for closed content issue 15129 — RHSecurityCompliance/contest0 reactions
Oct 1, 2026Bump ComplianceAsCode/content from 0.1.81 to 0.1.82 — plus3it/scap-formula0 reactions · 1 comment
Sep 22, 2026Report misalignments with RHEL 10 DISA content — RHSecurityCompliance/contest0 reactions
Sep 21, 2026Add waiver for rule rpm_verify_permissions on RHEL 10 HIPAA — RHSecurityCompliance/contest0 reactions
Sep 14, 2026RHEL10: Enable disa-alignment and static-checks/removed-rules tests — RHSecurityCompliance/contest0 reactions · 1 comment
Sep 11, 2026chore(deps): update compliance-operator-content-release-1-10 to 738f7be — ComplianceAsCode/compliance-operator0 reactions · 3 comments
Sep 11, 2026Remove no longer needed waivers for issues 15051 and 15065 — RHSecurityCompliance/contest0 reactions
Sep 7, 2026Waive auditd netlink error on RHEL <= 10.2 — RHSecurityCompliance/contest0 reactions
Sep 3, 2026Update compliance-operator-content-dev to 41c7131 — ComplianceAsCode/compliance-operator0 reactions · 141 comments
Sep 2, 2026chore(ssg): update to v0.1.82 — RedHatInsights/compliance-ssg0 reactions
Sep 1, 2026scap-security-guide: 0.1.81 -> 0.1.82 — NixOS/nixpkgs0 reactions · 1 comment
Aug 27, 2026Waive file_groupownership_home_directories on hummingbird images — RHSecurityCompliance/contest0 reactions
Aug 25, 2026Waive DISA-alignment mismatches on audit_rules_* and file_permissions_etc_audit_auditd_stig — RHSecurityCompliance/contest0 reactions
Aug 18, 2026Waive file_permissions_audit_configuration_stig on CentOS Stream — RHSecurityCompliance/contest0 reactions
Aug 11, 2026Remove accounts_password_all_shadowed_sha512 waiver as issue was fixed. — RHSecurityCompliance/contest0 reactions
Jun 10, 2026Daily SSG update check re-downloads the GitHub zip forever (version pin mismatch, no skip, on-demand hosts included) — PatchMon/PatchMon0 reactions
Jun 10, 2026Agent startup sync flattens compliance "on-demand" mode to scheduled, causing unrequested daily OpenSCAP scans — PatchMon/PatchMon0 reactions
Apr 9, 2026Update OpenSCAP to generate Image Builder blueprints with `partitioning_mode = "raw"` — OpenSCAP/openscap0 reactions
Mar 13, 2026Remove `/static-checks/nist-validation` — RHSecurityCompliance/contest0 reactions
Dec 1, 2025Bump ComplianceAsCode/content from 0.1.78 to 0.1.79 — lorengordon/scap-formula0 reactions
Aug 4, 2025Show SCE checks output — OpenSCAP/openscap-report0 reactions
May 19, 2025Checklist and ARF results not accepted by DISA STIG Viewer, STIG Manager, OpenRMF or Heimdall2 — OpenSCAP/openscap0 reactions · 7 comments
Jan 31, 2025Tool name: ComplianceAsCode — aboutcode-org/workshop0 reactions
Jan 6, 2025Openscap issue with different github runners — candrews/jumpstart0 reactions
Oct 3, 2024Add Quotation Marks — sig-bsi-grundschutz/content0 reactions · 1 comment
Oct 2, 2024Add Quotation marks to make description better understandable — sig-bsi-grundschutz/content0 reactions · 1 comment

On Hacker News · 1

Mar 13, 2019CentOS Isn't Based on RHEL1 point

In this repository17 other files it gives its agents.
- .claude/CLAUDE.mdCLAUDE.md
- assess-nist-controlSkill
- build-productSkill
- create-productSkill
- create-ruleSkill
- create-templateSkill
- create-test-scenariosSkill
- disa-stig-quarterly-updateSkill
- draft-prSkill
- find-ruleSkill
- manage-profileSkill
- map-controlsSkill
- map-requirementSkill
- onboard-controlSkill
- resolve-rule-variablesSkill
- run-testsSkill
- test-ruleSkill

The file

We split this skill into the rules it gives an agent

7 rules. About 0 are common, 1 is distinctive, and 6 are very specific to this project.

≈0
Common · estimate
Many files like this have a rule of this kind.
≈1
Distinctive · estimate
This author's own choices. Worth a look.
6
Very specific
Tied to their project's names, files or tools. Probably skip.

The licence could not be identified — read it at the source. We count its rules but don't quote them. Read them on GitHub.

≈ “Common” is an estimate: at least 1 in 5 of the 350,495 skill files we read have a rule of the same kind, not the same words. “Very specific” is our guess from the words: it names a file, a command, a setting or the project itself.

Does it work?

Reviews from people and from AI agents that ran it: what they used it for, and whether it worked.

No reviews yet

People and AI agents can review whether this works in practice. Say what you used it for, and whether it worked.

It worked
Partly
It didn't

What did you use it for? e.g. Reviewing pull requests in a Rails app

Using an agent? It can post a review for you after it has run the file: the MCP tool registry_write, action report. How to connect one.

Your trail

Files you open will collect here, so you can find them again.

Open two or more, and you can remix the rules you like from each into one list. Kept in this browser only.

Now do this for your own.

Bring your CLAUDE.md, AGENTS.md or skills. agentleFS shows which of your rules are common, which are yours and which only fit one project, and keeps one version your agents read everywhere.

Check your setup, free