Audit gap check

Compares the index of your audit evidence binder (document titles and dates only) against a certification checklist you paste, and returns a gap table with status, owner and due date, plus a 30-day prep plan. It flags gaps and never creates records. Use when a compliance or operations lead preps for an R2, e-Stewards, NAID, ISO or customer audit.

Run it as a prompt

Paste this into any AI agent, or fetch it: curl -s https://uplift.page/api/v1/prompts/audit-gap-check/raw

prompt.md

# Audit gap check

Before the auditor arrives, find what's missing, stale or unowned in my evidence. Flag the gaps; never fill them in.

## Before you start

Ask me for two things, then stop and wait:

1. **The checklist** I'm audited against: paste it from my certifier's current documents. If I don't have it handy, I can use the generic sample checklist below for practice, but it is not any standard's official text.
2. **My evidence index:** a list of document titles with dates and owners, not the documents themselves.

If I say **"use the sample"**, use both samples at the end of this prompt.

## Steps

1. **Match each checklist item** to the evidence that covers it, by title. One document can cover several items.
2. **Gap table,** one row per checklist item: item, matching evidence, status, owner, due date. The status is one of:
- **Have:** current and owned.
- **Stale:** older than the checklist's review cycle, or older than 12 months if none is stated.
- **Missing:** nothing matches.
- **Unclear:** the title is too vague to tell.
- **No owner.**
3. **Top five risks:** the gaps an auditor is most likely to write up, each in one line with why.
4. **30-day plan:** week by week, who does what. Use roles, not invented names.
5. **Questions for the team:** where a title is too vague to judge, ask what the document actually contains.

## Rules

- Never create, draft or fill in a record, log or certificate to close a gap. Say what's needed and who should produce it.
- Don't quote clause numbers or requirements from memory. Use only the checklist I gave you, and say so.
- This is prep, not certification advice. End with: "Confirm against your certifier's current requirements."

## Sample checklist (generic, for practice only; not any standard's official text)

1. Written data-sanitization procedure, reviewed yearly
2. Records of sanitization verification for each data-bearing device
3. Chain-of-custody records from pickup to final disposition
4. Downstream vendor list with due-diligence files
5. Facility security plan and access logs
6. Employee training records for data handling
7. Hazardous materials handling procedure (batteries, CRTs)
8. Incident response plan, tested yearly
9. Equipment calibration records (scales, shredders)
10. Insurance certificates, current
11. Management review minutes, yearly
12. Customer certificate-of-destruction template and issue log

## Sample evidence index (made up)

- Data Sanitization SOP v3, 2024-03-10, QA lead
- Wipe verification logs Jan–Sep 2026, ops
- Downstream vendors 2025.xlsx, 2025-02-01, compliance
- Training sign-in sheets 2026, HR
- Battery handling procedure, 2023-08-15, no owner listed
- Scale calibration cert, 2025-11-02, ops
- Shredder maintenance log, 2026, ops
- Certificate of insurance, expires 2026-12-31
- CoD template v2, QA lead
- Security camera policy, 2022-05-01, facilities

Install it as a skill

Agents that support the Agent Skills standard load it automatically when it applies.

download

curl -fsSL https://uplift.page/p/audit-gap-check/SKILL.md --create-dirs -o .agents/skills/audit-gap-check/SKILL.md

or from any MCP client

MCP server: https://uplift.page/mcp
Tool: pull_skill  {"slug": "audit-gap-check"}

The full skill

Before the auditor arrives, find what's missing, stale or unowned in my evidence. Flag the gaps; never fill them in.

Before you start

Ask me for two things, then stop and wait:

The checklist I'm audited against: paste it from my certifier's current documents. If I don't have it handy, I can use the generic sample checklist below for practice, but it is not any standard's official text.
My evidence index: a list of document titles with dates and owners, not the documents themselves.

If I say "use the sample", use both samples at the end of this prompt.

Steps

Match each checklist item to the evidence that covers it, by title. One document can cover several items.
Gap table, one row per checklist item: item, matching evidence, status, owner, due date. The status is one of:
- Have: current and owned.
- Stale: older than the checklist's review cycle, or older than 12 months if none is stated.
- Missing: nothing matches.
- Unclear: the title is too vague to tell.
- No owner.
Top five risks: the gaps an auditor is most likely to write up, each in one line with why.
30-day plan: week by week, who does what. Use roles, not invented names.
Questions for the team: where a title is too vague to judge, ask what the document actually contains.

Rules

Never create, draft or fill in a record, log or certificate to close a gap. Say what's needed and who should produce it.
Don't quote clause numbers or requirements from memory. Use only the checklist I gave you, and say so.
This is prep, not certification advice. End with: "Confirm against your certifier's current requirements."

Sample checklist (generic, for practice only; not any standard's official text)

Written data-sanitization procedure, reviewed yearly
Records of sanitization verification for each data-bearing device
Chain-of-custody records from pickup to final disposition
Downstream vendor list with due-diligence files
Facility security plan and access logs
Employee training records for data handling
Hazardous materials handling procedure (batteries, CRTs)
Incident response plan, tested yearly
Equipment calibration records (scales, shredders)
Insurance certificates, current
Management review minutes, yearly
Customer certificate-of-destruction template and issue log

Sample evidence index (made up)

Data Sanitization SOP v3, 2024-03-10, QA lead
Wipe verification logs Jan–Sep 2026, ops
Downstream vendors 2025.xlsx, 2025-02-01, compliance
Training sign-in sheets 2026, HR
Battery handling procedure, 2023-08-15, no owner listed
Scale calibration cert, 2025-11-02, ops
Shredder maintenance log, 2026, ops
Certificate of insurance, expires 2026-12-31
CoD template v2, QA lead
Security camera policy, 2022-05-01, facilities

Served from the uplift.page library and refreshed within 5 minutes of every update.