shinsa

Plugin shinsa in allsmog/shinsa-plugin. Commands read from the repo's manifest — 1 month ago.

Skills (4)

• Control Mapping

  This skill should be used when mapping ISO 27001 controls to other compliance frameworks (SOC 2, NIST 800-53, PCI DSS), when the user asks about "cross-standard mapping", "control mapping", "SOC 2 equivalent", "NIST mapping", "PCI DSS mapping", or when findings from one standard need to be translate

• Evidence Generation

  Use this skill when generating ISO 27001 or NIST SP 800-53 audit evidence packs, compliance reports, evidence narratives, reviewer-ready control matrices, or when the user asks about audit evidence, compliance evidence, evidence packages, audit documentation, or ISO/NIST evidence.

• ISO 27001 Annex A Controls

  This skill should be used when the user mentions "ISO 27001", "Annex A controls", "information security controls", "ISMS controls", "compliance controls", "ISO 27001 assessment", or needs to understand specific ISO 27001:2022 control requirements for code-level compliance assessment.

• NIST SP 800-53 Rev 5 Controls

  This skill should be used when the user mentions "NIST 800-53", "NIST SP 800-53", "NIST controls", "federal compliance", "FedRAMP controls", "FISMA", "NIST security controls", "800-53 assessment", or needs to understand specific NIST SP 800-53 Rev 5 control requirements for code-level compliance ass

Slash commands (6)

• /shinsa:compliance-scan

  Run an orchestrated ISO 27001 Annex A compliance assessment with parallel domain assessors, cold review rounds, and durable artifacts

• /shinsa:control-implement

  Maintainer-only implementation workflow that executes a Shinsa plan artifact with review and eval gates

• /shinsa:control-plan

  Maintainer-only planning workflow for new control coverage, prompt refactors, and evaluator changes in the Shinsa plugin

• /shinsa:nist-quick-check

  Orchestrated NIST quick check of a specific control or family with durable artifacts and a cold review pass

• /shinsa:nist-scan

  Run an orchestrated NIST SP 800-53 Rev 5 compliance assessment with parallel domain assessors, cold review rounds, and durable artifacts

• /shinsa:quick-check

  Orchestrated ISO quick check of a specific control or family with durable artifacts and a cold review pass

Subagents (13)

• auth-assessor

  Use this agent when assessing authentication, authorization, and access control compliance. Triggered by compliance-scan for controls A.8.2 (Privileged access rights), A.8.3 (Information access restriction), and A.8.5 (Secure authentication). Also triggered when user asks about "auth compliance", "a

• control-interpretation-reviewer

  Cold reviewer for Shinsa orchestrated runs. Use this reviewer after domain assessments to verify that the reported statuses and findings match the actual ISO 27001 or NIST SP 800-53 control requirements. This reviewer checks for over-claiming, under-scoping, and mismatches between code evidence and

• coverage-reviewer

  Cold reviewer for Shinsa orchestrated runs. Use this reviewer after domain assessments to search for nearby false negatives, missed files, and gaps in domain coverage. This reviewer assumes the assessors may have stopped too early and actively looks for missing evidence or missing controls within th

• crypto-assessor

  Use this agent when assessing cryptography and network security compliance. Triggered by compliance-scan for controls A.8.24 (Use of cryptography) and A.8.21 (Security of network services). Also triggered when user asks about "crypto compliance", "encryption assessment", "TLS configuration", "key ma

• data-protection-assessor

  Use this agent when assessing data protection, privacy, and information transfer compliance. Triggered by compliance-scan for controls A.8.10 (Information deletion), A.8.11 (Data masking), A.8.12 (Data leakage prevention), A.8.28 (Secure coding), and A.5.14 (Information transfer). Also triggered whe

• evidence-completeness-reviewer

  Cold reviewer for Shinsa orchestrated runs. Use this reviewer after domain assessments to verify that every status, maturity score, and finding is backed by sufficient file-and-line evidence. This reviewer must not rely on assessor reasoning and should request changes when evidence is thin, missing,

• logging-assessor

  Use this agent when assessing logging, monitoring, and audit trail compliance. Triggered by compliance-scan for controls A.8.15 (Logging), A.8.16 (Monitoring activities), A.8.17 (Clock synchronization), and A.8.34 (Protection of information systems during audit testing). Also triggered when user ask

• nist-access-control-assessor

  Use this agent when assessing access control and authentication compliance against NIST SP 800-53 Rev 5. Covers AC (Access Control) and IA (Identification and Authentication) family controls. Triggered when user asks about "NIST access control", "AC controls", "NIST authentication", "IA controls", "

• nist-audit-assessor

  Use this agent when assessing audit and accountability compliance against NIST SP 800-53 Rev 5. Covers AU (Audit and Accountability) family controls. Triggered when user asks about "NIST audit logging", "AU controls", "NIST audit trail", "NIST monitoring", "audit record NIST", or "NIST event logging

• nist-cm-assessor

  Use this agent when assessing configuration management and vulnerability scanning compliance against NIST SP 800-53 Rev 5. Covers CM (Configuration Management) and RA (Risk Assessment) family controls. Triggered when user asks about "NIST configuration management", "CM controls", "NIST baseline conf

• nist-sa-assessor

  Use this agent when assessing system acquisition and secure development lifecycle compliance against NIST SP 800-53 Rev 5. Covers SA (System and Services Acquisition) family controls. Triggered when user asks about "NIST SDLC", "SA controls", "NIST secure development", "NIST testing requirements", "

• nist-sc-assessor

  Use this agent when assessing system and communications protection compliance against NIST SP 800-53 Rev 5. Covers SC (System and Communications Protection) family controls. Triggered when user asks about "NIST encryption", "SC controls", "NIST cryptography", "NIST TLS", "NIST network security", "NI

• nist-si-assessor

  Use this agent when assessing system and information integrity compliance against NIST SP 800-53 Rev 5. Covers SI (System and Information Integrity) and MP (Media Protection) family controls. Triggered when user asks about "NIST input validation", "SI controls", "NIST error handling", "NIST flaw rem

Similar plugins