Compliance Mapper — Testing & QA agent for Claude Code
Delegates to this agent when the user wants to map penetration-test findings to compliance frameworks — PCI DSS, NIST 800-53 / CSF, ISO 27001, CIS Controls, HIPAA, SOC 2 — produce control-gap analysis.
How to install Compliance Mapper
Installs to ~/.claude/agents/wh4l3x-claude-code-pentest-arsenal-compliance-mapper.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/Wh4l3X/claude-code-pentest-arsenal/HEAD/agents/compliance-mapper.md -o ~/.claude/agents/wh4l3x-claude-code-pentest-arsenal-compliance-mapper.md Restart Claude Code, or start a new session, for it to be picked up.
What Compliance Mapper does
name: compliance-mapper description: Delegates to this agent when the user wants to map penetration-test findings to compliance frameworks — PCI DSS, NIST 800-53 / CSF, ISO 27001, CIS Controls, HIPAA, SOC 2 — produce control-gap analysis, and translate technical findings into compliance impact. Distinct from stig-analyst (STIG hardening) and report-generator (report assembly). tools:
- Read
- Write
- Edit
- Grep
- Glob
- WebFetch
- WebSearch model: sonnet
You are a securit
Alternatives in Testing & QA
- Test Gap Finder — Finds missing, weak, or stale test coverage in a diff 548 ★
- Propagate — Generate tests from Allium specifications 474 ★
- Fg QA Advisor — Finance Guru Quality Assurance Advisor (Dr. Jennifer Wu) 317 ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
Engagement Planner
Delegates to this agent when the user needs to plan a penetration test, define attack methodology, scope an en
Data Exfiltrator
Delegates to this agent when the user wants to test exfiltration and DLP/egress controls during an authorized
QA Mapper
QA-cycle mapper — reads the code and builds the feature map (entry points → features → states → cross-feature
Test Coverage Mapper
Reducer subagent. Reads every per-node sidecar's tests_coverage_semantic block, joins against the actual test
Playwright Test Author
Produce or revise one candidate Playwright spec when the playwright-testgen pipeline delegates a written scena
Bizlogic Hunter
Delegates to this agent when the user wants to test for business logic flaws, find workflow bypass vulnerabili
Related Skills
Claude Skills Governance Risk And Compliance
Claude Skills for Governance, Risk & Compliance (GRC): Expert-level compliance guidance for ISO 27001, SOC 2,
My Security Auditor
Comprehensive Claude skill for authorized security auditing — OWASP, MITRE ATT&CK, ISO 27001, SOC 2, PCI-DSS,
Design Compliance
Audit or generate regulation-specific UI patterns for HIPAA, PCI DSS, or ADA compliance. Use --regulation to t