policy gap review assistant pro
Audits draft policies for governance gaps, vague language, and operational readiness with a prioritized remediation plan.
$5
Works with the AI tools you already use
Claude Code
Cursor
Codex CLI
GitHub Copilot
Gemini CLI+20 moreClaude CodeCursorCodex CLIGitHub CopilotGemini CLI
OpenClaw
Manus
Grok+17 agentspolicy gap review assistant pro
Example session with this skill installed
Review this draft 3-paragraph "Remote Work Policy." It mentions employees need manager approval but doesn't say how to handle equipment returns or security breaches.
- Read your context and instructions
- Compiled the policy gap review
I have audited the draft Remote Work Policy. While it establishes a basic approval flow, it lacks critical operational controls regarding asset management and incident response.
Executive assessment
The draft is currently
Not ready for approval. While the intent is clear, the policy fails to define the scope of "Remote Work," lacks hardware lifecycle management, and provides no guidance on security incident reporting. These are material gaps that prevent consistent enforcement.
Coverage matrix
| Dimension | Status | Key observation | Priority |
|---|---|---|---|
| Roles & Responsibilities | Partially addressed | Mentions managers but not IT or HR roles. | High |
| Controls & Procedures | Materially missing | No procedure for equipment return or data security. | Critical |
| Exceptions & Escalation | Materially missing | No process for denied requests or policy violations. | High |
| Evidence & Records | Not determinable | No mention of where approval records are stored. | Medium |
Findings and remediation
| ID | Location | Type | Finding | Why it matters | Priority | Recommended action |
|---|---|---|---|---|---|---|
| F01 | "manager approval" | Vague wording | No criteria for approval or standard timeline. | Leads to inconsistent treatment of employees. | High | Define approval criteria (e.g., performance, role type). |
| F02 | N/A | Material Gap | Absence of equipment return protocols for offboarding. | Risk of asset loss and data leakage. | Critical | Add section on asset recovery and "Bring Your Own Device" (BYOD) limits. |
| F03 | N/A | Material Gap | No security breach reporting requirement. | Delays response to remote data incidents. | Critical | Link to the existing Incident Response Policy. |
Recommended policy structure
- Document Control
- Purpose & Scope (Define "Remote Work")
- Eligibility & Approval Process
- Equipment & Technology (Include return protocols)
- Information Security & Confidentiality
- Roles & Responsibilities
- Exceptions & Appeals
- Review & Revision
Next steps
- Define the specific "retention period" for approval emails with the Records team.
- Confirm with IT Security if a VPN is mandatory for all remote access.
- Insert a specific clause for "Asset Return" using the proposed wording below.
Connects securely to your tools. The creator never sees your data.
What you get
About this skill
The problem
Drafting corporate policies often results in vague language that makes enforcement impossible or leaves critical governance gaps that auditors will flag. Policy owners frequently miss operational details like exception handling, monitoring, and specific ownership, leading to compliance failures.
What it does
- Identifies material gaps in governance, controls, roles, and scope within draft policy documents.
- Distinguishes between subjective, vague wording and missing structural requirements.
- Generates a coverage matrix mapping the draft against 15 key policy dimensions like escalation and evidence.
- Produces a prioritized remediation roadmap categorized by pre-approval and post-implementation actions.
- Flags specific clauses requiring legal, tax, privacy, or regulatory verification without inventing obligations.
Why this beats prompting it yourself
General prompts often hallucinate regulatory requirements or rewrite text for style rather than substance. This skill follows a strict internal methodology that preserves the owner's intent while explicitly identifying missing operational evidence and distinguishing between mandatory controls and implementation details.
Use cases
- Auditing a new Data Privacy Policy for operational readiness before legal review.
- Reviewing an Internal Expenses Policy to ensure clear escalation and exception workflows.
- Gap-checking a Vendor Management Standard against organizational governance requirements.
- Restructuring a legacy HR policy into a modern, testable framework with clear version control.
Known limitations
This tool identifies internal structural and operational gaps. It cannot provide legal or regulatory advice and requires an external verifier for jurisdictional compliance.
How to install
Works the same in every agent - Claude, Cursor, Codex, Copilot and 20+ more.
- 1
Download the ZIP
Free skills download straight away. Paid skills unlock right after purchase.
- 2
Unzip into your skills folder
Every agent reads skills from one folder on your machine. Drop the unzipped folder in there.
- 3
Ask your agent to use it
Restart the agent if it was already running. It picks the skill up automatically - no config needed.
Skills folder by agent
Click the path to copy it. Create the folder if it does not exist yet.
Reviews
No reviews yet
Be one of the first to try it. Every listed skill passes our trust checks below.
Security scanned
Passed our 8-point scan before listing
Fresh listing
Recently published to Agensi
30-day refund
Not a fit? Get your money back
Trust & safety
Security scanned
Verified clean 18 days ago
- Passed all security checks, Safe to install