Validates audit evidence artifacts for completeness, timeliness, relevance, and authenticity. Reviews screenshots, logs, configurations, and policies against control requirements.
SkillScore100Maintained
Automatic
◆Security & AppSec pack
Last verified 8/24/2026
What it changes
Passed 22 of 22 test cases with the skill, and 20 of 22 without it.
Without skill91%
With skill100%
Checks it passed that the model alone missed
Document sampling constraints and contextual observations in the Auditor Notes section
Record identified control deficiencies and corrective actions in a Gaps and Recommendations section
2 fixed20 passed either way0 still failing0 broke
Pass-rate lift
+9 pp
Tokens
+3%
Agent turns
0%
Response time
-14%
Model gemini-3.6-flashMeasured 8/24/2026v122 of 22 cases passed with skill
Tokens, turns and time describe resource use, not a dollar price.
See it in action
One of 2 test cases the skill fixed. Same model, same prompt, with and without the skill.
1 of 2
Prompt
During an evidence evaluation, an auditor notes that sample size selection was constrained due to vendor API rate limiting. In a standard evidence review memo, where should this context reside?
What was checked, without and with the skill
Checked
Without skill
With skill
Document sampling constraints and contextual observations in the Auditor Notes section
Missed
Passed
case-18 · gemini-3.6-flash · 8/24/2026 · answers are capped and redacted
What's inside
The instructions your model reads when the skill loads.
SKILL.md37 linessingle file
Evidence Validator
Analyzes and validates evidence artifacts submitted for audit review.
Capabilities
Completeness Check: Verifies evidence covers all aspects of the control
Timeliness Validation: Confirms evidence is from the audit period
Relevance Assessment: Ensures evidence actually demonstrates the control
Authenticity Review: Identifies potential tampering or inconsistencies
Evidence Types Supported
Screenshots and images
Configuration files (JSON, YAML, XML)
Log files and exports
Policy documents (PDF, DOCX, MD)
Access review spreadsheets
System-generated reports
Output Format
Generates evidence review memos with:
Evidence identification
Control mapping
Validation results
Gaps and recommendations
Auditor notes
Example Usage
When reviewing evidence for SOC 2 CC6.1 (Logical Access):
Validates access review screenshots show appropriate approvals
Confirms termination evidence matches HR records
Verifies configuration exports match stated policies