# cursor-compliance-audit

## Skill Scaffold

```
cursor-compliance-audit/
    SKILL.md
```

## File Descriptions

### 1. SKILL.md

**Purpose:** Provides compliance and security auditing procedures for Cursor usage including SOC 2, GDPR, and HIPAA frameworks with checklists and remediation guidance.

**Workflow:** This skill activates when security or compliance teams need to audit Cursor deployments. It covers compliance overview, security checklists, framework-specific considerations, audit procedures, tools, remediation, and reporting.

**Relates to:** cursor-privacy-settings (security configuration), cursor-team-setup (access management), cursor-sso-integration (authentication audit), cursor-api-key-management (key management audit)

## Summary

This compliance skill covers comprehensive security and compliance auditing for Cursor. It includes Cursor's compliance status (SOC 2 Type II, GDPR, CCPA), customer responsibilities, security audit checklists (access control, data protection, configuration), framework-specific guidance for SOC 2 (Trust Service Criteria), GDPR (data subject rights), and HIPAA (PHI handling), quarterly and annual audit procedures, automated scanning tools (git secrets, trufflehog), common findings with remediation, and audit report templates.
