policy gap review assistant pro
Audits draft policies for governance gaps, vague language, and operational readiness with a prioritized remediation plan.
$5
Works with the AI Agents you already use
Claude Code
Cursor
Codex CLI
Muse
Dots+21 moreClaude CodeCursorCodex CLIMuseDots
Manus
Grok
Grok Bot+18 agentspolicy gap review assistant pro
Example session with this skill installed
Review this draft 3-paragraph "Remote Work Policy." It mentions employees need manager approval but doesn't say how to handle equipment returns or security breaches.
- Read your context and instructions
- Compiled the policy gap review
I have audited the draft Remote Work Policy. While it establishes a basic approval flow, it lacks critical operational controls regarding asset management and incident response.
Executive assessment
The draft is currently
Not ready for approval. While the intent is clear, the policy fails to define the scope of "Remote Work," lacks hardware lifecycle management, and provides no guidance on security incident reporting. These are material gaps that prevent consistent enforcement.
Coverage matrix
| Dimension | Status | Key observation | Priority |
|---|---|---|---|
| Roles & Responsibilities | Partially addressed | Mentions managers but not IT or HR roles. | High |
| Controls & Procedures | Materially missing | No procedure for equipment return or data security. | Critical |
| Exceptions & Escalation | Materially missing | No process for denied requests or policy violations. | High |
| Evidence & Records | Not determinable | No mention of where approval records are stored. | Medium |
Findings and remediation
| ID | Location | Type | Finding | Why it matters | Priority | Recommended action |
|---|---|---|---|---|---|---|
| F01 | "manager approval" | Vague wording | No criteria for approval or standard timeline. | Leads to inconsistent treatment of employees. | High | Define approval criteria (e.g., performance, role type). |
| F02 | N/A | Material Gap | Absence of equipment return protocols for offboarding. | Risk of asset loss and data leakage. | Critical | Add section on asset recovery and "Bring Your Own Device" (BYOD) limits. |
| F03 | N/A | Material Gap | No security breach reporting requirement. | Delays response to remote data incidents. | Critical | Link to the existing Incident Response Policy. |
Recommended policy structure
- Document Control
- Purpose & Scope (Define "Remote Work")
- Eligibility & Approval Process
- Equipment & Technology (Include return protocols)
- Information Security & Confidentiality
- Roles & Responsibilities
- Exceptions & Appeals
- Review & Revision
Next steps
- Define the specific "retention period" for approval emails with the Records team.
- Confirm with IT Security if a VPN is mandatory for all remote access.
- Insert a specific clause for "Asset Return" using the proposed wording below.
Connects securely to your tools. The creator never sees your data.
About this skill
The problem
Drafting corporate policies often results in vague language that makes enforcement impossible or leaves critical governance gaps that auditors will flag. Policy owners frequently miss operational details like exception handling, monitoring, and specific ownership, leading to compliance failures.
What it does
- Identifies material gaps in governance, controls, roles, and scope within draft policy documents.
- Distinguishes between subjective, vague wording and missing structural requirements.
- Generates a coverage matrix mapping the draft against 15 key policy dimensions like escalation and evidence.
- Produces a prioritized remediation roadmap categorized by pre-approval and post-implementation actions.
- Flags specific clauses requiring legal, tax, privacy, or regulatory verification without inventing obligations.
Why this beats prompting it yourself
General prompts often hallucinate regulatory requirements or rewrite text for style rather than substance. This skill follows a strict internal methodology that preserves the owner's intent while explicitly identifying missing operational evidence and distinguishing between mandatory controls and implementation details.
Use cases
- Auditing a new Data Privacy Policy for operational readiness before legal review.
- Reviewing an Internal Expenses Policy to ensure clear escalation and exception workflows.
- Gap-checking a Vendor Management Standard against organizational governance requirements.
- Restructuring a legacy HR policy into a modern, testable framework with clear version control.
Known limitations
This tool identifies internal structural and operational gaps. It cannot provide legal or regulatory advice and requires an external verifier for jurisdictional compliance.
Cannot provide legal advice or verify jurisdictional compliance. Requires the user to provide context on the policy's purpose and scope for high-accuracy mapping.
How to use
- 1
Connect your agent to the Agensi MCP
Copy the prompt and paste it into Claude, ChatGPT, Cursor or any agent that supports MCP. It sets up the connection for you. Manual setup
- 2
Sign in to Agensi
Your agent shows a sign-in link. Sign in and click Allow.
- 3
Ask for what you need
Your agent loads this skill and uses it on your task. It always asks before any payment.
Reviews
No reviews yet
Be one of the first to try it. Every listed skill goes through the trust checks below.
Security scanned
Checked by our 8-point scan before listing
Fresh listing
Recently published to Agensi
Money-back guarantee
Doesn't do what its page promises? You get your money back.
Trust & safety
Security scan
Security scan passed 2 months ago
Permissions
No special permissions declared or detected