CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

aims-audit

/cs:aims-audit <scope> — ISO/IEC 42001 AIMS internal-audit 6-question forcing interrogation. Use before certification stage 1, before annual internal audit cycles, or when onboarding a new AI system into an existing AIMS.

63

Quality

79%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Passed

No findings from the security scan

Fix and improve this skill with Tessl

tessl review fix ./compliance-os/skills/aims-audit/SKILL.md
SKILL.md
Quality
Evals
Security

Quality

Content

68%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The body is an efficient, domain-dense checklist with concrete script commands and a full output template, assuming Claude's ISO 42001 competence throughout. Its main weakness is the Workflow section, which sequences four script invocations without any validation checkpoints or error-handling guidance, and references to scripts and mapping files that do not exist in this bundle.

Suggestions

Add validation checkpoints to the Workflow (e.g., 'if gap analysis reports critical gaps, resolve or escalate before building the risk register' and what to do on script failure), so the sequence carries explicit decision points.

Briefly specify the expected shape of the input files (evidence.json, risks.json, audit_scope.json) so the commands are fully self-contained.

Ship or inline the referenced materials (aims_gap_analyzer.py, ai_risk_register_builder.py, aims_audit_scheduler.py, cross_framework_mapping_ai.md) inside the skill's scripts/ and references/ directories, since the current paths point to an external skill and none are present in this bundle.

DimensionReasoningScore

Conciseness

The body is lean and checklist-driven ('Scope omission = certification finding', 'Marketing-copy "AI ethics" doesn't pass') with no explanations of ISO 42001 basics. Minor trimmable duplication remains: the 'When to Run' bullets restate the description's triggers almost verbatim.

4 / 5

Actionability

Concrete executable commands are given (e.g., 'python ra-qm-team/skills/iso42001-specialist/scripts/aims_gap_analyzer.py evidence.json') plus a complete output-format template. However, the expected contents of the input files (evidence.json, risks.json, audit_scope.json) are never described, leaving a minor gap.

4 / 5

Workflow Clarity

The Workflow section lists a clear 4-step numbered sequence, but there are no validation or checkpoint steps between steps (nothing on what to do when a script fails or when gap analysis surfaces critical gaps); the verdict traffic-light is only a terminal checkpoint. This matches 'sequence present but checkpoints missing or implicit' rather than 'most checkpoints present'.

3 / 5

Progressive Disclosure

Sections are well-organized (When to Run, Six Questions, Workflow, Output Format, Routing, Related) and external references are signaled inline. No bundle files exist, and several referenced paths (the aims_* scripts, cross_framework_mapping_ai.md, the ../../skills/compliance-os path) point outside the skill and cannot be verified from the bundle, which is a minor organization gap.

4 / 5

Total

15

/

20

Passed

Description

82%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong description: explicit what-and-when structure with concrete, natural trigger phrases in a well-defined niche. Its only weakness is that it names a single composite action rather than enumerating the specific capabilities it provides.

Suggestions

Enumerate one or two more concrete actions (e.g., 'runs gap analysis on Clauses 4-10 and builds the Annex A control-mapped risk register') so the what-clause lists specific capabilities rather than one composite action.

Add common synonyms users might say, such as 'ISO 42001 audit', 'AI management system review', or 'certification readiness', to broaden trigger-term coverage.

DimensionReasoningScore

Specificity

Names the domain precisely ('ISO/IEC 42001 AIMS internal-audit') and one concrete action ('6-question forcing interrogation'), but does not list several specific actions, matching the 1-2-concrete-actions anchor rather than the several-actions anchor.

3 / 5

Completeness

It explicitly answers both what ('ISO/IEC 42001 AIMS internal-audit 6-question forcing interrogation') and when ('Use before certification stage 1, before annual internal audit cycles, or when onboarding a new AI system into an existing AIMS') with concrete trigger phrases.

5 / 5

Trigger Term Quality

Natural trigger phrases like 'certification stage 1', 'annual internal audit cycles', and 'onboarding a new AI system into an existing AIMS' are present, but common synonyms such as 'ISO 42001 audit' or 'AI management system' are missing, so it falls short of comprehensive coverage.

4 / 5

Distinctiveness Conflict Risk

The ISO/IEC 42001 AIMS internal-audit niche is highly specific with distinct trigger terms, making conflict with other skills minimal.

5 / 5

Total

17

/

20

Passed

Validation

93%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 15 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

relative_links

Relative link issues: 2 suspicious

Warning

Total

15

/

16

Passed

Repository

alirezarezvani/claude-skills

Path

compliance-os/skills/aims-audit/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.