Document Finder
Scan a directory, classify your compliance documents, get an analysis plan
Scans a directory of documents, classifies each file by compliance type (BAA, security policy, risk assessment, IR plan, and more), resolves version conflicts with your input, and produces a prioritized analysis plan mapping confirmed-current documents to the right compliance skill. Routes to the analysis skills rather than performing analysis itself.
From document to output
Point the skill at any directory containing compliance documents (PDFs, DOCX, TXT, MD)
Each file is classified by compliance type using filename and content signals: BAA, security policy, risk assessment, IR/contingency plan, framework document, and more
When multiple versions of the same document are found, the skill pauses to confirm which version is current before proceeding
A prioritized manifest maps each confirmed-current document to the right compliance skill, with the exact slash command to invoke for each
What you get back
Every finding is structured JSON: status, evidence, risk level, and remediation in one package. No interpretation required before acting on it.
{
"total_files_scanned": 14,
"compliance_relevant": 9,
"version_clusters_resolved": 1,
"suggested_next_steps": [
{
"priority": 1,
"file": "vendor-agreements/AWS_BAA_2024.pdf",
"skill": "baa-review"
},
{
"priority": 2,
"file": "policies/Information_Security_Policy_v2.docx",
"skill": "hipaa-gap-analysis"
},
{
"priority": 3,
"file": "assessments/Risk_Assessment_2024.pdf",
"skill": "risk-assessment"
}
]
} Three ways to run this skill
The first two are yours to run. The third is the platform, which runs as the instrument behind the practice rather than as a product sold here.
One-click install for Claude and Cowork users. The skill runs as a native tool in your Claude environment. No configuration, no MCP setup. Apache 2.0.
Get on ClawHub →Install as an MCP server in Claude Code, or download the SKILL.md and use it as a system prompt with any LLM. Runs the full methodology against documents you provide. Apache 2.0. No account required.
The platform runs this skill against a full document corpus in a workspace-isolated store: every finding is sourced to a specific document section, cross-referenced across the policy library, and carries a disposition and a reasoning trace. Not currently open for signups. It runs as the instrument behind the practice, and access is arranged inside an engagement.
How the practice runs it12 more skills in the methodology.
HIPAA Gap Analysis, BAA Review, Framework Mapping, Control Assessment, Risk Assessment, AI Claims Assessment, Part 2 Notice Assessment, Compliance Q&A, Compliance Posture Intake, Legal Page Discovery, Skill Router, and AI Tooling Inventory. All open source under Apache 2.0.
Need this done rather than explained? Dan Gonzalez runs Dang's Solutions, the practice that delivers it.