name: domain-audit
description: "Audit a session against its domain pack, especially the regulated and operations-heavy packs such as HR, legal, marketing, sales, real-estate, government, insurance, logistics, manufacturing, e-commerce, and nonprofit. Use this when domain-specific policy needs a manual pass."
when_to_use: "Activate before handling data in regulated or sensitive domains, or when the user asks about HR policy, legal compliance, GDPR, healthcare, finance, or any industry-specific governance requirements."
argument-hint: "[domain or data type to audit]"
license: Apache-2.0
compatibility:
- codex
- claude-standalone
- claude-plugin
- copilot-plugin
- github-repo
- open-standard
- cline-native
- cursor-native
- windsurf-native
- continue-native
- letta-code-native
- pi-native
- roo-native
- goose-native
- opencode-native
- gemini-cli-native
- kiro-native
- kilo-native
- amp-native
- augment-native
- hermes-native
- multica-native
- openclaw-native
- devin-terminal-native
- warp-native
- droid-bundle
- forge-acp
metadata:
author: controlkeel
version: "2.0"
category: domain
ck_mcp_tools:
- ck_context
- ck_finding
Domain Audit Skill
Use this skill when the session’s domain pack drives the real risk more than generic software checks.
Focus areas
- HR: bias, candidate data, compensation visibility
- Legal: privilege, retention, document handling
- Marketing: consent, unsubscribe, analytics PII
- Sales: CRM data, contact deletion, revenue visibility
- Real estate: fair-housing logic, tenant PII, retention
- Government: records retention, constituent data, approval chains
- Insurance: claims fairness, medical-adjacent privacy, denial review
- E-commerce: card scope, refunds, fraud controls
- Logistics: shipment custody, dispatch safety, carrier data
- Manufacturing: QA holds, traceability, plant safety
- Nonprofit: donor privacy, grant restrictions, beneficiary exports
Additional resources