[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill-anthropic-audit-support":3,"mdc--77gsn4-key":37,"related-org-anthropic-audit-support":1954,"related-repo-anthropic-audit-support":2143},{"slug":4,"name":4,"fn":5,"description":6,"org":7,"tags":12,"stars":26,"repoUrl":27,"updatedAt":28,"license":29,"forks":30,"topics":31,"repo":32,"sourceUrl":35,"mdContent":36},"audit-support","support SOX 404 control testing","Support SOX 404 compliance with control testing methodology, sample selection, and documentation standards. Use when generating testing workpapers, selecting audit samples, classifying control deficiencies, or preparing for internal or external audits.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},"anthropic","Anthropic","https:\u002F\u002Fpexgzepcugksgbtrxkhf.supabase.co\u002Fstorage\u002Fv1\u002Fobject\u002Fpublic\u002Forg-logos\u002Fanthropic.png","anthropics",[13,17,20,23],{"name":14,"slug":15,"type":16},"Finance","finance","tag",{"name":18,"slug":19,"type":16},"Audit","audit",{"name":21,"slug":22,"type":16},"Regulatory Compliance","regulatory-compliance",{"name":24,"slug":25,"type":16},"SOX","sox",22885,"https:\u002F\u002Fgithub.com\u002Fanthropics\u002Fknowledge-work-plugins","2026-04-06T17:57:36.714815",null,2736,[],{"repoUrl":27,"stars":26,"forks":30,"topics":33,"description":34},[],"Open source repository of plugins primarily intended for knowledge workers to use in Claude Cowork","https:\u002F\u002Fgithub.com\u002Fanthropics\u002Fknowledge-work-plugins\u002Ftree\u002FHEAD\u002Ffinance\u002Fskills\u002Faudit-support","---\nname: audit-support\ndescription: Support SOX 404 compliance with control testing methodology, sample selection, and documentation standards. Use when generating testing workpapers, selecting audit samples, classifying control deficiencies, or preparing for internal or external audits.\nuser-invocable: false\n---\n\n# Audit Support\n\n**Important**: This skill assists with SOX compliance workflows but does not provide audit or legal advice. All testing workpapers and assessments should be reviewed by qualified financial professionals. While \"significance\" and \"materiality\" are context-specific concepts that are ultimately assessed by auditors, this skill is intended to assist professionals in the creation and evaluation of effective internal controls and documentation for audits.\n\nSOX 404 control testing methodology, sample selection approaches, testing documentation standards, control deficiency classification, and common control types.\n\n## SOX 404 Control Testing Methodology\n\n### Overview\n\nSOX Section 404 requires management to assess the effectiveness of internal controls over financial reporting (ICFR). This involves:\n\n1. **Scoping:** Identify significant accounts and relevant assertions\n2. **Risk assessment:** Evaluate the risk of material misstatement for each significant account\n3. **Control identification:** Document the controls that address each risk\n4. **Testing:** Test the design and operating effectiveness of key controls\n5. **Evaluation:** Assess whether any deficiencies exist and their severity\n6. **Reporting:** Document the assessment and any material weaknesses\n\n### Scoping Significant Accounts\n\nAn account is significant if there is more than a remote likelihood that it could contain a misstatement that is material (individually or in aggregate).\n\n**Quantitative factors:**\n- Account balance exceeds materiality threshold (typically 3-5% of a key benchmark)\n- Transaction volume is high, increasing the risk of error\n- Account is subject to significant estimates or judgment\n\n**Qualitative factors:**\n- Account involves complex accounting (revenue recognition, derivatives, pensions)\n- Account is susceptible to fraud (cash, revenue, related-party transactions)\n- Account has had prior misstatements or audit adjustments\n- Account involves significant management judgment or estimates\n- New account or significantly changed process\n\n### Relevant Assertions by Account Type\n\n| Account Type | Key Assertions |\n|-------------|---------------|\n| Revenue | Occurrence, Completeness, Accuracy, Cut-off |\n| Accounts Receivable | Existence, Valuation (allowance), Rights |\n| Inventory | Existence, Valuation, Completeness |\n| Fixed Assets | Existence, Valuation, Completeness, Rights |\n| Accounts Payable | Completeness, Accuracy, Existence |\n| Accrued Liabilities | Completeness, Valuation, Accuracy |\n| Equity | Completeness, Accuracy, Presentation |\n| Financial Close\u002FReporting | Presentation, Accuracy, Completeness |\n\n### Design Effectiveness vs Operating Effectiveness\n\n**Design effectiveness:** Is the control properly designed to prevent or detect a material misstatement in the relevant assertion?\n- Evaluated through walkthroughs (trace a transaction end-to-end through the process)\n- Confirm the control is placed at the right point in the process\n- Confirm the control addresses the identified risk\n- Performed at least annually, or when processes change\n\n**Operating effectiveness:** Did the control actually operate as designed throughout the testing period?\n- Evaluated through testing (inspection, observation, re-performance, inquiry)\n- Requires sufficient sample sizes to support a conclusion\n- Must cover the full period of reliance\n\n## Sample Selection Approaches\n\n### Random Selection\n\n**When to use:** Default method for transaction-level controls with large populations.\n\n**Method:**\n1. Define the population (all transactions subject to the control during the period)\n2. Number each item in the population sequentially\n3. Use a random number generator to select sample items\n4. Ensure no bias in selection (all items have equal probability)\n\n**Advantages:** Statistically valid, defensible, no selection bias\n**Disadvantages:** May miss high-risk items, requires complete population listing\n\n### Targeted (Judgmental) Selection\n\n**When to use:** Supplement to random selection for risk-based testing; primary method when population is small or highly varied.\n\n**Method:**\n1. Identify items with specific risk characteristics:\n   - High dollar amount (above a defined threshold)\n   - Unusual or non-standard transactions\n   - Period-end transactions (cut-off risk)\n   - Related-party transactions\n   - Manual or override transactions\n   - New vendor\u002Fcustomer transactions\n2. Select items matching risk criteria\n3. Document rationale for each targeted selection\n\n**Advantages:** Focuses on highest-risk items, efficient use of testing effort\n**Disadvantages:** Not statistically representative, may over-represent certain risks\n\n### Haphazard Selection\n\n**When to use:** When random selection is impractical (no sequential population listing) and population is relatively homogeneous.\n\n**Method:**\n1. Select items without any specific pattern or bias\n2. Ensure selections are spread across the full population period\n3. Avoid unconscious bias (don't always pick items at the top, round numbers, etc.)\n\n**Advantages:** Simple, no technology required\n**Disadvantages:** Not statistically valid, susceptible to unconscious bias\n\n### Systematic Selection\n\n**When to use:** When population is sequential and you want even coverage across the period.\n\n**Method:**\n1. Calculate the sampling interval: Population size \u002F Sample size\n2. Select a random starting point within the first interval\n3. Select every Nth item from the starting point\n\n**Example:** Population of 1,000, sample of 25 → interval of 40. Random start: item 17. Select items 17, 57, 97, 137, ...\n\n**Advantages:** Even coverage across population, simple to execute\n**Disadvantages:** Periodic patterns in the population could bias results\n\n### Sample Size Guidance\n\n| Control Frequency | Expected Population | Low Risk Sample | Moderate Risk Sample | High Risk Sample |\n|------------------|--------------------|-----------------|--------------------|-----------------|\n| Annual | 1 | 1 | 1 | 1 |\n| Quarterly | 4 | 2 | 2 | 3 |\n| Monthly | 12 | 2 | 3 | 4 |\n| Weekly | 52 | 5 | 8 | 15 |\n| Daily | ~250 | 20 | 30 | 40 |\n| Per-transaction (small pop.) | \u003C 250 | 20 | 30 | 40 |\n| Per-transaction (large pop.) | 250+ | 25 | 40 | 60 |\n\n**Factors increasing sample size:**\n- Higher inherent risk in the account\u002Fprocess\n- Control is the sole control addressing a significant risk (no redundancy)\n- Prior period control deficiency identified\n- New control (not tested in prior periods)\n- External auditor reliance on management testing\n\n## Testing Documentation Standards\n\n### Workpaper Requirements\n\nEvery control test should be documented with:\n\n1. **Control identification:**\n   - Control number\u002FID\n   - Control description (what is done, by whom, how often)\n   - Control type (manual, automated, IT-dependent manual)\n   - Control frequency\n   - Risk and assertion addressed\n\n2. **Test design:**\n   - Test objective (what you are trying to determine)\n   - Test procedures (step-by-step instructions)\n   - Expected evidence (what you expect to see if the control is effective)\n   - Sample selection methodology and rationale\n\n3. **Test execution:**\n   - Population description and size\n   - Sample selection details (method, items selected)\n   - Results for each sample item (pass\u002Ffail with specific evidence examined)\n   - Exceptions noted with full description\n\n4. **Conclusion:**\n   - Overall assessment (effective \u002F deficiency \u002F significant deficiency \u002F material weakness)\n   - Basis for conclusion\n   - Impact assessment for any exceptions\n   - Compensating controls considered (if applicable)\n\n5. **Sign-off:**\n   - Tester name and date\n   - Reviewer name and date\n\n### Evidence Standards\n\n**Sufficient evidence includes:**\n- Screenshots showing system-enforced controls\n- Signed\u002Finitialed approval documents\n- Email approvals with identifiable approver and date\n- System audit logs showing who performed the action and when\n- Re-performed calculations with matching results\n- Observation notes (with date, location, observer)\n\n**Insufficient evidence:**\n- Verbal confirmations alone (must be corroborated)\n- Undated documents\n- Evidence without identifiable performer\u002Fapprover\n- Generic system reports without date\u002Ftime stamps\n- \"Per discussion with [name]\" without corroborating documentation\n\n### Working Paper Organization\n\nOrganize testing files by control area:\n\n```\nSOX Testing\u002F\n├── [Year]\u002F\n│   ├── Scoping and Risk Assessment\u002F\n│   ├── Revenue Cycle\u002F\n│   │   ├── Control Matrix\n│   │   ├── Walkthrough Documentation\n│   │   ├── Test Workpapers (one per control)\n│   │   └── Supporting Evidence\n│   ├── Procure to Pay\u002F\n│   ├── Payroll\u002F\n│   ├── Financial Close\u002F\n│   ├── Treasury\u002F\n│   ├── Fixed Assets\u002F\n│   ├── IT General Controls\u002F\n│   ├── Entity Level Controls\u002F\n│   └── Summary and Conclusions\u002F\n│       ├── Deficiency Evaluation\n│       └── Management Assessment\n```\n\n## Control Deficiency Classification\n\n### Deficiency\n\nA deficiency in internal control exists when the design or operation of a control does not allow management or employees, in the normal course of performing their assigned functions, to prevent or detect misstatements on a timely basis.\n\n**Evaluation factors:**\n- What is the likelihood that the control failure could result in a misstatement?\n- What is the magnitude of the potential misstatement?\n- Is there a compensating control that mitigates the deficiency?\n\n### Significant Deficiency\n\nA deficiency, or combination of deficiencies, that is less severe than a material weakness yet important enough to merit attention by those charged with governance.\n\n**Indicators:**\n- The deficiency could result in a misstatement that is more than inconsequential but less than material\n- There is more than a remote (but less than reasonably possible) likelihood of a material misstatement\n- The control is a key control and the deficiency is not fully mitigated by compensating controls\n- Combination of individually minor deficiencies that together represent a significant concern\n\n### Material Weakness\n\nA deficiency, or combination of deficiencies, such that there is a reasonable possibility that a material misstatement of the financial statements will not be prevented or detected on a timely basis.\n\n**Indicators:**\n- Identification of fraud by senior management (any magnitude)\n- Restatement of previously issued financial statements to correct a material error\n- Identification by the auditor of a material misstatement that would not have been detected by the company's controls\n- Ineffective oversight of financial reporting by the audit committee\n- Deficiency in a pervasive control (entity-level, IT general control) affecting multiple processes\n\n### Deficiency Aggregation\n\nIndividual deficiencies that are not significant individually may be significant in combination:\n\n1. Identify all deficiencies in the same process or affecting the same assertion\n2. Evaluate whether the combined effect could result in a material misstatement\n3. Consider whether deficiencies in compensating controls exacerbate other deficiencies\n4. Document the aggregation analysis and conclusion\n\n### Remediation\n\nFor each identified deficiency:\n\n1. **Root cause analysis:** Why did the control fail? (design gap, execution failure, staffing, training, system issue)\n2. **Remediation plan:** Specific actions to fix the control (redesign, additional training, system enhancement, added review)\n3. **Timeline:** Target date for remediation completion\n4. **Owner:** Person responsible for implementing the remediation\n5. **Validation:** How and when the remediated control will be re-tested to confirm effectiveness\n\n## Common Control Types\n\n### IT General Controls (ITGCs)\n\nControls over the IT environment that support the reliable functioning of application controls and automated processes.\n\n**Access Controls:**\n- User access provisioning (new access requests require approval)\n- User access de-provisioning (terminated users removed timely)\n- Privileged access management (admin\u002Fsuperuser access restricted and monitored)\n- Periodic access reviews (user access recertified on a defined schedule)\n- Password policies (complexity, rotation, lockout)\n- Segregation of duties enforcement (conflicting access prevented)\n\n**Change Management:**\n- Change requests documented and approved before implementation\n- Changes tested in a non-production environment before promotion\n- Separation of development and production environments\n- Emergency change procedures (documented, approved post-implementation)\n- Change review and post-implementation validation\n\n**IT Operations:**\n- Batch job monitoring and exception handling\n- Backup and recovery procedures (regular backups, tested restores)\n- System availability and performance monitoring\n- Incident management and escalation procedures\n- Disaster recovery planning and testing\n\n### Manual Controls\n\nControls performed by people using judgment, typically involving review and approval.\n\n**Examples:**\n- Management review of financial statements and key metrics\n- Supervisory approval of journal entries above a threshold\n- Three-way match verification (PO, receipt, invoice)\n- Account reconciliation preparation and review\n- Physical inventory observation and count\n- Vendor master data change approval\n- Customer credit approval\n\n**Key attributes to test:**\n- Was the control performed by the right person (proper authority)?\n- Was it performed timely (within the required timeframe)?\n- Is there evidence of the review (signature, initials, email, system log)?\n- Did the reviewer have sufficient information to perform an effective review?\n- Were exceptions identified and appropriately addressed?\n\n### Automated Controls\n\nControls enforced by IT systems without human intervention.\n\n**Examples:**\n- System-enforced approval workflows (cannot proceed without required approvals)\n- Three-way match automation (system blocks payment if PO\u002Freceipt\u002Finvoice don't match)\n- Duplicate payment detection (system flags or blocks duplicate invoices)\n- Credit limit enforcement (system prevents orders exceeding credit limit)\n- Automated calculations (depreciation, amortization, interest, tax)\n- System-enforced segregation of duties (conflicting roles prevented)\n- Input validation controls (required fields, format checks, range checks)\n- Automated reconciliation matching\n\n**Testing approach:**\n- Test design: Confirm the system configuration enforces the control as intended\n- Test operating effectiveness: For automated controls, if the system configuration has not changed, one test of the control is typically sufficient for the period (supplemented by ITGC testing of change management)\n- Verify change management ITGCs are effective (if system changed, re-test the control)\n\n### IT-Dependent Manual Controls\n\nManual controls that rely on the completeness and accuracy of system-generated information.\n\n**Examples:**\n- Management review of a system-generated exception report\n- Supervisor review of a system-generated aging report to assess reserves\n- Reconciliation using system-generated trial balance data\n- Approval of transactions identified by a system-generated workflow\n\n**Testing approach:**\n- Test the manual control (review, approval, follow-up on exceptions)\n- AND test the completeness and accuracy of the underlying report\u002Fdata (IPE — Information Produced by the Entity)\n- IPE testing confirms the data the reviewer relied on was complete and accurate\n\n### Entity-Level Controls\n\nBroad controls that operate at the organizational level and affect multiple processes.\n\n**Examples:**\n- Tone at the top \u002F code of conduct\n- Risk assessment process\n- Audit committee oversight of financial reporting\n- Internal audit function and activities\n- Fraud risk assessment and anti-fraud programs\n- Whistleblower\u002Fethics hotline\n- Management monitoring of control effectiveness\n- Financial reporting competence (staffing, training, qualifications)\n- Period-end financial reporting process (close procedures, GAAP compliance reviews)\n\n**Significance:**\n- Entity-level controls can mitigate but typically cannot replace process-level controls\n- Ineffective entity-level controls (especially audit committee oversight and tone at the top) are strong indicators of a material weakness\n- Effective entity-level controls may reduce the extent of testing needed for process-level controls\n",{"data":38,"body":40},{"name":4,"description":6,"user-invocable":39},false,{"type":41,"children":42},"root",[43,51,63,68,75,82,87,152,158,163,171,190,198,226,232,364,370,380,403,413,431,437,443,453,461,484,501,507,516,523,574,589,595,604,611,629,644,650,659,666,684,694,709,715,937,945,973,979,985,990,1142,1148,1156,1189,1197,1233,1239,1244,1257,1263,1269,1274,1282,1300,1306,1311,1319,1342,1348,1353,1360,1388,1394,1399,1422,1428,1433,1486,1492,1498,1503,1511,1544,1552,1580,1588,1616,1622,1627,1635,1673,1681,1709,1715,1720,1727,1770,1778,1796,1802,1807,1814,1837,1844,1862,1868,1873,1880,1928,1936],{"type":44,"tag":45,"props":46,"children":47},"element","h1",{"id":4},[48],{"type":49,"value":50},"text","Audit Support",{"type":44,"tag":52,"props":53,"children":54},"p",{},[55,61],{"type":44,"tag":56,"props":57,"children":58},"strong",{},[59],{"type":49,"value":60},"Important",{"type":49,"value":62},": This skill assists with SOX compliance workflows but does not provide audit or legal advice. All testing workpapers and assessments should be reviewed by qualified financial professionals. While \"significance\" and \"materiality\" are context-specific concepts that are ultimately assessed by auditors, this skill is intended to assist professionals in the creation and evaluation of effective internal controls and documentation for audits.",{"type":44,"tag":52,"props":64,"children":65},{},[66],{"type":49,"value":67},"SOX 404 control testing methodology, sample selection approaches, testing documentation standards, control deficiency classification, and common control types.",{"type":44,"tag":69,"props":70,"children":72},"h2",{"id":71},"sox-404-control-testing-methodology",[73],{"type":49,"value":74},"SOX 404 Control Testing Methodology",{"type":44,"tag":76,"props":77,"children":79},"h3",{"id":78},"overview",[80],{"type":49,"value":81},"Overview",{"type":44,"tag":52,"props":83,"children":84},{},[85],{"type":49,"value":86},"SOX Section 404 requires management to assess the effectiveness of internal controls over financial reporting (ICFR). This involves:",{"type":44,"tag":88,"props":89,"children":90},"ol",{},[91,102,112,122,132,142],{"type":44,"tag":92,"props":93,"children":94},"li",{},[95,100],{"type":44,"tag":56,"props":96,"children":97},{},[98],{"type":49,"value":99},"Scoping:",{"type":49,"value":101}," Identify significant accounts and relevant assertions",{"type":44,"tag":92,"props":103,"children":104},{},[105,110],{"type":44,"tag":56,"props":106,"children":107},{},[108],{"type":49,"value":109},"Risk assessment:",{"type":49,"value":111}," Evaluate the risk of material misstatement for each significant account",{"type":44,"tag":92,"props":113,"children":114},{},[115,120],{"type":44,"tag":56,"props":116,"children":117},{},[118],{"type":49,"value":119},"Control identification:",{"type":49,"value":121}," Document the controls that address each risk",{"type":44,"tag":92,"props":123,"children":124},{},[125,130],{"type":44,"tag":56,"props":126,"children":127},{},[128],{"type":49,"value":129},"Testing:",{"type":49,"value":131}," Test the design and operating effectiveness of key controls",{"type":44,"tag":92,"props":133,"children":134},{},[135,140],{"type":44,"tag":56,"props":136,"children":137},{},[138],{"type":49,"value":139},"Evaluation:",{"type":49,"value":141}," Assess whether any deficiencies exist and their severity",{"type":44,"tag":92,"props":143,"children":144},{},[145,150],{"type":44,"tag":56,"props":146,"children":147},{},[148],{"type":49,"value":149},"Reporting:",{"type":49,"value":151}," Document the assessment and any material weaknesses",{"type":44,"tag":76,"props":153,"children":155},{"id":154},"scoping-significant-accounts",[156],{"type":49,"value":157},"Scoping Significant Accounts",{"type":44,"tag":52,"props":159,"children":160},{},[161],{"type":49,"value":162},"An account is significant if there is more than a remote likelihood that it could contain a misstatement that is material (individually or in aggregate).",{"type":44,"tag":52,"props":164,"children":165},{},[166],{"type":44,"tag":56,"props":167,"children":168},{},[169],{"type":49,"value":170},"Quantitative factors:",{"type":44,"tag":172,"props":173,"children":174},"ul",{},[175,180,185],{"type":44,"tag":92,"props":176,"children":177},{},[178],{"type":49,"value":179},"Account balance exceeds materiality threshold (typically 3-5% of a key benchmark)",{"type":44,"tag":92,"props":181,"children":182},{},[183],{"type":49,"value":184},"Transaction volume is high, increasing the risk of error",{"type":44,"tag":92,"props":186,"children":187},{},[188],{"type":49,"value":189},"Account is subject to significant estimates or judgment",{"type":44,"tag":52,"props":191,"children":192},{},[193],{"type":44,"tag":56,"props":194,"children":195},{},[196],{"type":49,"value":197},"Qualitative factors:",{"type":44,"tag":172,"props":199,"children":200},{},[201,206,211,216,221],{"type":44,"tag":92,"props":202,"children":203},{},[204],{"type":49,"value":205},"Account involves complex accounting (revenue recognition, derivatives, pensions)",{"type":44,"tag":92,"props":207,"children":208},{},[209],{"type":49,"value":210},"Account is susceptible to fraud (cash, revenue, related-party transactions)",{"type":44,"tag":92,"props":212,"children":213},{},[214],{"type":49,"value":215},"Account has had prior misstatements or audit adjustments",{"type":44,"tag":92,"props":217,"children":218},{},[219],{"type":49,"value":220},"Account involves significant management judgment or estimates",{"type":44,"tag":92,"props":222,"children":223},{},[224],{"type":49,"value":225},"New account or significantly changed process",{"type":44,"tag":76,"props":227,"children":229},{"id":228},"relevant-assertions-by-account-type",[230],{"type":49,"value":231},"Relevant Assertions by Account Type",{"type":44,"tag":233,"props":234,"children":235},"table",{},[236,255],{"type":44,"tag":237,"props":238,"children":239},"thead",{},[240],{"type":44,"tag":241,"props":242,"children":243},"tr",{},[244,250],{"type":44,"tag":245,"props":246,"children":247},"th",{},[248],{"type":49,"value":249},"Account Type",{"type":44,"tag":245,"props":251,"children":252},{},[253],{"type":49,"value":254},"Key Assertions",{"type":44,"tag":256,"props":257,"children":258},"tbody",{},[259,273,286,299,312,325,338,351],{"type":44,"tag":241,"props":260,"children":261},{},[262,268],{"type":44,"tag":263,"props":264,"children":265},"td",{},[266],{"type":49,"value":267},"Revenue",{"type":44,"tag":263,"props":269,"children":270},{},[271],{"type":49,"value":272},"Occurrence, Completeness, Accuracy, Cut-off",{"type":44,"tag":241,"props":274,"children":275},{},[276,281],{"type":44,"tag":263,"props":277,"children":278},{},[279],{"type":49,"value":280},"Accounts Receivable",{"type":44,"tag":263,"props":282,"children":283},{},[284],{"type":49,"value":285},"Existence, Valuation (allowance), Rights",{"type":44,"tag":241,"props":287,"children":288},{},[289,294],{"type":44,"tag":263,"props":290,"children":291},{},[292],{"type":49,"value":293},"Inventory",{"type":44,"tag":263,"props":295,"children":296},{},[297],{"type":49,"value":298},"Existence, Valuation, Completeness",{"type":44,"tag":241,"props":300,"children":301},{},[302,307],{"type":44,"tag":263,"props":303,"children":304},{},[305],{"type":49,"value":306},"Fixed Assets",{"type":44,"tag":263,"props":308,"children":309},{},[310],{"type":49,"value":311},"Existence, Valuation, Completeness, Rights",{"type":44,"tag":241,"props":313,"children":314},{},[315,320],{"type":44,"tag":263,"props":316,"children":317},{},[318],{"type":49,"value":319},"Accounts Payable",{"type":44,"tag":263,"props":321,"children":322},{},[323],{"type":49,"value":324},"Completeness, Accuracy, Existence",{"type":44,"tag":241,"props":326,"children":327},{},[328,333],{"type":44,"tag":263,"props":329,"children":330},{},[331],{"type":49,"value":332},"Accrued Liabilities",{"type":44,"tag":263,"props":334,"children":335},{},[336],{"type":49,"value":337},"Completeness, Valuation, Accuracy",{"type":44,"tag":241,"props":339,"children":340},{},[341,346],{"type":44,"tag":263,"props":342,"children":343},{},[344],{"type":49,"value":345},"Equity",{"type":44,"tag":263,"props":347,"children":348},{},[349],{"type":49,"value":350},"Completeness, Accuracy, Presentation",{"type":44,"tag":241,"props":352,"children":353},{},[354,359],{"type":44,"tag":263,"props":355,"children":356},{},[357],{"type":49,"value":358},"Financial Close\u002FReporting",{"type":44,"tag":263,"props":360,"children":361},{},[362],{"type":49,"value":363},"Presentation, Accuracy, Completeness",{"type":44,"tag":76,"props":365,"children":367},{"id":366},"design-effectiveness-vs-operating-effectiveness",[368],{"type":49,"value":369},"Design Effectiveness vs Operating Effectiveness",{"type":44,"tag":52,"props":371,"children":372},{},[373,378],{"type":44,"tag":56,"props":374,"children":375},{},[376],{"type":49,"value":377},"Design effectiveness:",{"type":49,"value":379}," Is the control properly designed to prevent or detect a material misstatement in the relevant assertion?",{"type":44,"tag":172,"props":381,"children":382},{},[383,388,393,398],{"type":44,"tag":92,"props":384,"children":385},{},[386],{"type":49,"value":387},"Evaluated through walkthroughs (trace a transaction end-to-end through the process)",{"type":44,"tag":92,"props":389,"children":390},{},[391],{"type":49,"value":392},"Confirm the control is placed at the right point in the process",{"type":44,"tag":92,"props":394,"children":395},{},[396],{"type":49,"value":397},"Confirm the control addresses the identified risk",{"type":44,"tag":92,"props":399,"children":400},{},[401],{"type":49,"value":402},"Performed at least annually, or when processes change",{"type":44,"tag":52,"props":404,"children":405},{},[406,411],{"type":44,"tag":56,"props":407,"children":408},{},[409],{"type":49,"value":410},"Operating effectiveness:",{"type":49,"value":412}," Did the control actually operate as designed throughout the testing period?",{"type":44,"tag":172,"props":414,"children":415},{},[416,421,426],{"type":44,"tag":92,"props":417,"children":418},{},[419],{"type":49,"value":420},"Evaluated through testing (inspection, observation, re-performance, inquiry)",{"type":44,"tag":92,"props":422,"children":423},{},[424],{"type":49,"value":425},"Requires sufficient sample sizes to support a conclusion",{"type":44,"tag":92,"props":427,"children":428},{},[429],{"type":49,"value":430},"Must cover the full period of reliance",{"type":44,"tag":69,"props":432,"children":434},{"id":433},"sample-selection-approaches",[435],{"type":49,"value":436},"Sample Selection Approaches",{"type":44,"tag":76,"props":438,"children":440},{"id":439},"random-selection",[441],{"type":49,"value":442},"Random Selection",{"type":44,"tag":52,"props":444,"children":445},{},[446,451],{"type":44,"tag":56,"props":447,"children":448},{},[449],{"type":49,"value":450},"When to use:",{"type":49,"value":452}," Default method for transaction-level controls with large populations.",{"type":44,"tag":52,"props":454,"children":455},{},[456],{"type":44,"tag":56,"props":457,"children":458},{},[459],{"type":49,"value":460},"Method:",{"type":44,"tag":88,"props":462,"children":463},{},[464,469,474,479],{"type":44,"tag":92,"props":465,"children":466},{},[467],{"type":49,"value":468},"Define the population (all transactions subject to the control during the period)",{"type":44,"tag":92,"props":470,"children":471},{},[472],{"type":49,"value":473},"Number each item in the population sequentially",{"type":44,"tag":92,"props":475,"children":476},{},[477],{"type":49,"value":478},"Use a random number generator to select sample items",{"type":44,"tag":92,"props":480,"children":481},{},[482],{"type":49,"value":483},"Ensure no bias in selection (all items have equal probability)",{"type":44,"tag":52,"props":485,"children":486},{},[487,492,494,499],{"type":44,"tag":56,"props":488,"children":489},{},[490],{"type":49,"value":491},"Advantages:",{"type":49,"value":493}," Statistically valid, defensible, no selection bias\n",{"type":44,"tag":56,"props":495,"children":496},{},[497],{"type":49,"value":498},"Disadvantages:",{"type":49,"value":500}," May miss high-risk items, requires complete population listing",{"type":44,"tag":76,"props":502,"children":504},{"id":503},"targeted-judgmental-selection",[505],{"type":49,"value":506},"Targeted (Judgmental) Selection",{"type":44,"tag":52,"props":508,"children":509},{},[510,514],{"type":44,"tag":56,"props":511,"children":512},{},[513],{"type":49,"value":450},{"type":49,"value":515}," Supplement to random selection for risk-based testing; primary method when population is small or highly varied.",{"type":44,"tag":52,"props":517,"children":518},{},[519],{"type":44,"tag":56,"props":520,"children":521},{},[522],{"type":49,"value":460},{"type":44,"tag":88,"props":524,"children":525},{},[526,564,569],{"type":44,"tag":92,"props":527,"children":528},{},[529,531],{"type":49,"value":530},"Identify items with specific risk characteristics:\n",{"type":44,"tag":172,"props":532,"children":533},{},[534,539,544,549,554,559],{"type":44,"tag":92,"props":535,"children":536},{},[537],{"type":49,"value":538},"High dollar amount (above a defined threshold)",{"type":44,"tag":92,"props":540,"children":541},{},[542],{"type":49,"value":543},"Unusual or non-standard transactions",{"type":44,"tag":92,"props":545,"children":546},{},[547],{"type":49,"value":548},"Period-end transactions (cut-off risk)",{"type":44,"tag":92,"props":550,"children":551},{},[552],{"type":49,"value":553},"Related-party transactions",{"type":44,"tag":92,"props":555,"children":556},{},[557],{"type":49,"value":558},"Manual or override transactions",{"type":44,"tag":92,"props":560,"children":561},{},[562],{"type":49,"value":563},"New vendor\u002Fcustomer transactions",{"type":44,"tag":92,"props":565,"children":566},{},[567],{"type":49,"value":568},"Select items matching risk criteria",{"type":44,"tag":92,"props":570,"children":571},{},[572],{"type":49,"value":573},"Document rationale for each targeted selection",{"type":44,"tag":52,"props":575,"children":576},{},[577,581,583,587],{"type":44,"tag":56,"props":578,"children":579},{},[580],{"type":49,"value":491},{"type":49,"value":582}," Focuses on highest-risk items, efficient use of testing effort\n",{"type":44,"tag":56,"props":584,"children":585},{},[586],{"type":49,"value":498},{"type":49,"value":588}," Not statistically representative, may over-represent certain risks",{"type":44,"tag":76,"props":590,"children":592},{"id":591},"haphazard-selection",[593],{"type":49,"value":594},"Haphazard Selection",{"type":44,"tag":52,"props":596,"children":597},{},[598,602],{"type":44,"tag":56,"props":599,"children":600},{},[601],{"type":49,"value":450},{"type":49,"value":603}," When random selection is impractical (no sequential population listing) and population is relatively homogeneous.",{"type":44,"tag":52,"props":605,"children":606},{},[607],{"type":44,"tag":56,"props":608,"children":609},{},[610],{"type":49,"value":460},{"type":44,"tag":88,"props":612,"children":613},{},[614,619,624],{"type":44,"tag":92,"props":615,"children":616},{},[617],{"type":49,"value":618},"Select items without any specific pattern or bias",{"type":44,"tag":92,"props":620,"children":621},{},[622],{"type":49,"value":623},"Ensure selections are spread across the full population period",{"type":44,"tag":92,"props":625,"children":626},{},[627],{"type":49,"value":628},"Avoid unconscious bias (don't always pick items at the top, round numbers, etc.)",{"type":44,"tag":52,"props":630,"children":631},{},[632,636,638,642],{"type":44,"tag":56,"props":633,"children":634},{},[635],{"type":49,"value":491},{"type":49,"value":637}," Simple, no technology required\n",{"type":44,"tag":56,"props":639,"children":640},{},[641],{"type":49,"value":498},{"type":49,"value":643}," Not statistically valid, susceptible to unconscious bias",{"type":44,"tag":76,"props":645,"children":647},{"id":646},"systematic-selection",[648],{"type":49,"value":649},"Systematic Selection",{"type":44,"tag":52,"props":651,"children":652},{},[653,657],{"type":44,"tag":56,"props":654,"children":655},{},[656],{"type":49,"value":450},{"type":49,"value":658}," When population is sequential and you want even coverage across the period.",{"type":44,"tag":52,"props":660,"children":661},{},[662],{"type":44,"tag":56,"props":663,"children":664},{},[665],{"type":49,"value":460},{"type":44,"tag":88,"props":667,"children":668},{},[669,674,679],{"type":44,"tag":92,"props":670,"children":671},{},[672],{"type":49,"value":673},"Calculate the sampling interval: Population size \u002F Sample size",{"type":44,"tag":92,"props":675,"children":676},{},[677],{"type":49,"value":678},"Select a random starting point within the first interval",{"type":44,"tag":92,"props":680,"children":681},{},[682],{"type":49,"value":683},"Select every Nth item from the starting point",{"type":44,"tag":52,"props":685,"children":686},{},[687,692],{"type":44,"tag":56,"props":688,"children":689},{},[690],{"type":49,"value":691},"Example:",{"type":49,"value":693}," Population of 1,000, sample of 25 → interval of 40. Random start: item 17. Select items 17, 57, 97, 137, ...",{"type":44,"tag":52,"props":695,"children":696},{},[697,701,703,707],{"type":44,"tag":56,"props":698,"children":699},{},[700],{"type":49,"value":491},{"type":49,"value":702}," Even coverage across population, simple to execute\n",{"type":44,"tag":56,"props":704,"children":705},{},[706],{"type":49,"value":498},{"type":49,"value":708}," Periodic patterns in the population could bias results",{"type":44,"tag":76,"props":710,"children":712},{"id":711},"sample-size-guidance",[713],{"type":49,"value":714},"Sample Size Guidance",{"type":44,"tag":233,"props":716,"children":717},{},[718,749],{"type":44,"tag":237,"props":719,"children":720},{},[721],{"type":44,"tag":241,"props":722,"children":723},{},[724,729,734,739,744],{"type":44,"tag":245,"props":725,"children":726},{},[727],{"type":49,"value":728},"Control Frequency",{"type":44,"tag":245,"props":730,"children":731},{},[732],{"type":49,"value":733},"Expected Population",{"type":44,"tag":245,"props":735,"children":736},{},[737],{"type":49,"value":738},"Low Risk Sample",{"type":44,"tag":245,"props":740,"children":741},{},[742],{"type":49,"value":743},"Moderate Risk Sample",{"type":44,"tag":245,"props":745,"children":746},{},[747],{"type":49,"value":748},"High Risk Sample",{"type":44,"tag":256,"props":750,"children":751},{},[752,777,804,829,857,885,910],{"type":44,"tag":241,"props":753,"children":754},{},[755,760,765,769,773],{"type":44,"tag":263,"props":756,"children":757},{},[758],{"type":49,"value":759},"Annual",{"type":44,"tag":263,"props":761,"children":762},{},[763],{"type":49,"value":764},"1",{"type":44,"tag":263,"props":766,"children":767},{},[768],{"type":49,"value":764},{"type":44,"tag":263,"props":770,"children":771},{},[772],{"type":49,"value":764},{"type":44,"tag":263,"props":774,"children":775},{},[776],{"type":49,"value":764},{"type":44,"tag":241,"props":778,"children":779},{},[780,785,790,795,799],{"type":44,"tag":263,"props":781,"children":782},{},[783],{"type":49,"value":784},"Quarterly",{"type":44,"tag":263,"props":786,"children":787},{},[788],{"type":49,"value":789},"4",{"type":44,"tag":263,"props":791,"children":792},{},[793],{"type":49,"value":794},"2",{"type":44,"tag":263,"props":796,"children":797},{},[798],{"type":49,"value":794},{"type":44,"tag":263,"props":800,"children":801},{},[802],{"type":49,"value":803},"3",{"type":44,"tag":241,"props":805,"children":806},{},[807,812,817,821,825],{"type":44,"tag":263,"props":808,"children":809},{},[810],{"type":49,"value":811},"Monthly",{"type":44,"tag":263,"props":813,"children":814},{},[815],{"type":49,"value":816},"12",{"type":44,"tag":263,"props":818,"children":819},{},[820],{"type":49,"value":794},{"type":44,"tag":263,"props":822,"children":823},{},[824],{"type":49,"value":803},{"type":44,"tag":263,"props":826,"children":827},{},[828],{"type":49,"value":789},{"type":44,"tag":241,"props":830,"children":831},{},[832,837,842,847,852],{"type":44,"tag":263,"props":833,"children":834},{},[835],{"type":49,"value":836},"Weekly",{"type":44,"tag":263,"props":838,"children":839},{},[840],{"type":49,"value":841},"52",{"type":44,"tag":263,"props":843,"children":844},{},[845],{"type":49,"value":846},"5",{"type":44,"tag":263,"props":848,"children":849},{},[850],{"type":49,"value":851},"8",{"type":44,"tag":263,"props":853,"children":854},{},[855],{"type":49,"value":856},"15",{"type":44,"tag":241,"props":858,"children":859},{},[860,865,870,875,880],{"type":44,"tag":263,"props":861,"children":862},{},[863],{"type":49,"value":864},"Daily",{"type":44,"tag":263,"props":866,"children":867},{},[868],{"type":49,"value":869},"~250",{"type":44,"tag":263,"props":871,"children":872},{},[873],{"type":49,"value":874},"20",{"type":44,"tag":263,"props":876,"children":877},{},[878],{"type":49,"value":879},"30",{"type":44,"tag":263,"props":881,"children":882},{},[883],{"type":49,"value":884},"40",{"type":44,"tag":241,"props":886,"children":887},{},[888,893,898,902,906],{"type":44,"tag":263,"props":889,"children":890},{},[891],{"type":49,"value":892},"Per-transaction (small pop.)",{"type":44,"tag":263,"props":894,"children":895},{},[896],{"type":49,"value":897},"\u003C 250",{"type":44,"tag":263,"props":899,"children":900},{},[901],{"type":49,"value":874},{"type":44,"tag":263,"props":903,"children":904},{},[905],{"type":49,"value":879},{"type":44,"tag":263,"props":907,"children":908},{},[909],{"type":49,"value":884},{"type":44,"tag":241,"props":911,"children":912},{},[913,918,923,928,932],{"type":44,"tag":263,"props":914,"children":915},{},[916],{"type":49,"value":917},"Per-transaction (large pop.)",{"type":44,"tag":263,"props":919,"children":920},{},[921],{"type":49,"value":922},"250+",{"type":44,"tag":263,"props":924,"children":925},{},[926],{"type":49,"value":927},"25",{"type":44,"tag":263,"props":929,"children":930},{},[931],{"type":49,"value":884},{"type":44,"tag":263,"props":933,"children":934},{},[935],{"type":49,"value":936},"60",{"type":44,"tag":52,"props":938,"children":939},{},[940],{"type":44,"tag":56,"props":941,"children":942},{},[943],{"type":49,"value":944},"Factors increasing sample size:",{"type":44,"tag":172,"props":946,"children":947},{},[948,953,958,963,968],{"type":44,"tag":92,"props":949,"children":950},{},[951],{"type":49,"value":952},"Higher inherent risk in the account\u002Fprocess",{"type":44,"tag":92,"props":954,"children":955},{},[956],{"type":49,"value":957},"Control is the sole control addressing a significant risk (no redundancy)",{"type":44,"tag":92,"props":959,"children":960},{},[961],{"type":49,"value":962},"Prior period control deficiency identified",{"type":44,"tag":92,"props":964,"children":965},{},[966],{"type":49,"value":967},"New control (not tested in prior periods)",{"type":44,"tag":92,"props":969,"children":970},{},[971],{"type":49,"value":972},"External auditor reliance on management testing",{"type":44,"tag":69,"props":974,"children":976},{"id":975},"testing-documentation-standards",[977],{"type":49,"value":978},"Testing Documentation Standards",{"type":44,"tag":76,"props":980,"children":982},{"id":981},"workpaper-requirements",[983],{"type":49,"value":984},"Workpaper Requirements",{"type":44,"tag":52,"props":986,"children":987},{},[988],{"type":49,"value":989},"Every control test should be documented with:",{"type":44,"tag":88,"props":991,"children":992},{},[993,1028,1059,1090,1121],{"type":44,"tag":92,"props":994,"children":995},{},[996,1000],{"type":44,"tag":56,"props":997,"children":998},{},[999],{"type":49,"value":119},{"type":44,"tag":172,"props":1001,"children":1002},{},[1003,1008,1013,1018,1023],{"type":44,"tag":92,"props":1004,"children":1005},{},[1006],{"type":49,"value":1007},"Control number\u002FID",{"type":44,"tag":92,"props":1009,"children":1010},{},[1011],{"type":49,"value":1012},"Control description (what is done, by whom, how often)",{"type":44,"tag":92,"props":1014,"children":1015},{},[1016],{"type":49,"value":1017},"Control type (manual, automated, IT-dependent manual)",{"type":44,"tag":92,"props":1019,"children":1020},{},[1021],{"type":49,"value":1022},"Control frequency",{"type":44,"tag":92,"props":1024,"children":1025},{},[1026],{"type":49,"value":1027},"Risk and assertion addressed",{"type":44,"tag":92,"props":1029,"children":1030},{},[1031,1036],{"type":44,"tag":56,"props":1032,"children":1033},{},[1034],{"type":49,"value":1035},"Test design:",{"type":44,"tag":172,"props":1037,"children":1038},{},[1039,1044,1049,1054],{"type":44,"tag":92,"props":1040,"children":1041},{},[1042],{"type":49,"value":1043},"Test objective (what you are trying to determine)",{"type":44,"tag":92,"props":1045,"children":1046},{},[1047],{"type":49,"value":1048},"Test procedures (step-by-step instructions)",{"type":44,"tag":92,"props":1050,"children":1051},{},[1052],{"type":49,"value":1053},"Expected evidence (what you expect to see if the control is effective)",{"type":44,"tag":92,"props":1055,"children":1056},{},[1057],{"type":49,"value":1058},"Sample selection methodology and rationale",{"type":44,"tag":92,"props":1060,"children":1061},{},[1062,1067],{"type":44,"tag":56,"props":1063,"children":1064},{},[1065],{"type":49,"value":1066},"Test execution:",{"type":44,"tag":172,"props":1068,"children":1069},{},[1070,1075,1080,1085],{"type":44,"tag":92,"props":1071,"children":1072},{},[1073],{"type":49,"value":1074},"Population description and size",{"type":44,"tag":92,"props":1076,"children":1077},{},[1078],{"type":49,"value":1079},"Sample selection details (method, items selected)",{"type":44,"tag":92,"props":1081,"children":1082},{},[1083],{"type":49,"value":1084},"Results for each sample item (pass\u002Ffail with specific evidence examined)",{"type":44,"tag":92,"props":1086,"children":1087},{},[1088],{"type":49,"value":1089},"Exceptions noted with full description",{"type":44,"tag":92,"props":1091,"children":1092},{},[1093,1098],{"type":44,"tag":56,"props":1094,"children":1095},{},[1096],{"type":49,"value":1097},"Conclusion:",{"type":44,"tag":172,"props":1099,"children":1100},{},[1101,1106,1111,1116],{"type":44,"tag":92,"props":1102,"children":1103},{},[1104],{"type":49,"value":1105},"Overall assessment (effective \u002F deficiency \u002F significant deficiency \u002F material weakness)",{"type":44,"tag":92,"props":1107,"children":1108},{},[1109],{"type":49,"value":1110},"Basis for conclusion",{"type":44,"tag":92,"props":1112,"children":1113},{},[1114],{"type":49,"value":1115},"Impact assessment for any exceptions",{"type":44,"tag":92,"props":1117,"children":1118},{},[1119],{"type":49,"value":1120},"Compensating controls considered (if applicable)",{"type":44,"tag":92,"props":1122,"children":1123},{},[1124,1129],{"type":44,"tag":56,"props":1125,"children":1126},{},[1127],{"type":49,"value":1128},"Sign-off:",{"type":44,"tag":172,"props":1130,"children":1131},{},[1132,1137],{"type":44,"tag":92,"props":1133,"children":1134},{},[1135],{"type":49,"value":1136},"Tester name and date",{"type":44,"tag":92,"props":1138,"children":1139},{},[1140],{"type":49,"value":1141},"Reviewer name and date",{"type":44,"tag":76,"props":1143,"children":1145},{"id":1144},"evidence-standards",[1146],{"type":49,"value":1147},"Evidence Standards",{"type":44,"tag":52,"props":1149,"children":1150},{},[1151],{"type":44,"tag":56,"props":1152,"children":1153},{},[1154],{"type":49,"value":1155},"Sufficient evidence includes:",{"type":44,"tag":172,"props":1157,"children":1158},{},[1159,1164,1169,1174,1179,1184],{"type":44,"tag":92,"props":1160,"children":1161},{},[1162],{"type":49,"value":1163},"Screenshots showing system-enforced controls",{"type":44,"tag":92,"props":1165,"children":1166},{},[1167],{"type":49,"value":1168},"Signed\u002Finitialed approval documents",{"type":44,"tag":92,"props":1170,"children":1171},{},[1172],{"type":49,"value":1173},"Email approvals with identifiable approver and date",{"type":44,"tag":92,"props":1175,"children":1176},{},[1177],{"type":49,"value":1178},"System audit logs showing who performed the action and when",{"type":44,"tag":92,"props":1180,"children":1181},{},[1182],{"type":49,"value":1183},"Re-performed calculations with matching results",{"type":44,"tag":92,"props":1185,"children":1186},{},[1187],{"type":49,"value":1188},"Observation notes (with date, location, observer)",{"type":44,"tag":52,"props":1190,"children":1191},{},[1192],{"type":44,"tag":56,"props":1193,"children":1194},{},[1195],{"type":49,"value":1196},"Insufficient evidence:",{"type":44,"tag":172,"props":1198,"children":1199},{},[1200,1205,1210,1215,1220],{"type":44,"tag":92,"props":1201,"children":1202},{},[1203],{"type":49,"value":1204},"Verbal confirmations alone (must be corroborated)",{"type":44,"tag":92,"props":1206,"children":1207},{},[1208],{"type":49,"value":1209},"Undated documents",{"type":44,"tag":92,"props":1211,"children":1212},{},[1213],{"type":49,"value":1214},"Evidence without identifiable performer\u002Fapprover",{"type":44,"tag":92,"props":1216,"children":1217},{},[1218],{"type":49,"value":1219},"Generic system reports without date\u002Ftime stamps",{"type":44,"tag":92,"props":1221,"children":1222},{},[1223,1225,1231],{"type":49,"value":1224},"\"Per discussion with ",{"type":44,"tag":1226,"props":1227,"children":1228},"span",{},[1229],{"type":49,"value":1230},"name",{"type":49,"value":1232},"\" without corroborating documentation",{"type":44,"tag":76,"props":1234,"children":1236},{"id":1235},"working-paper-organization",[1237],{"type":49,"value":1238},"Working Paper Organization",{"type":44,"tag":52,"props":1240,"children":1241},{},[1242],{"type":49,"value":1243},"Organize testing files by control area:",{"type":44,"tag":1245,"props":1246,"children":1250},"pre",{"className":1247,"code":1249,"language":49},[1248],"language-text","SOX Testing\u002F\n├── [Year]\u002F\n│   ├── Scoping and Risk Assessment\u002F\n│   ├── Revenue Cycle\u002F\n│   │   ├── Control Matrix\n│   │   ├── Walkthrough Documentation\n│   │   ├── Test Workpapers (one per control)\n│   │   └── Supporting Evidence\n│   ├── Procure to Pay\u002F\n│   ├── Payroll\u002F\n│   ├── Financial Close\u002F\n│   ├── Treasury\u002F\n│   ├── Fixed Assets\u002F\n│   ├── IT General Controls\u002F\n│   ├── Entity Level Controls\u002F\n│   └── Summary and Conclusions\u002F\n│       ├── Deficiency Evaluation\n│       └── Management Assessment\n",[1251],{"type":44,"tag":1252,"props":1253,"children":1255},"code",{"__ignoreMap":1254},"",[1256],{"type":49,"value":1249},{"type":44,"tag":69,"props":1258,"children":1260},{"id":1259},"control-deficiency-classification",[1261],{"type":49,"value":1262},"Control Deficiency Classification",{"type":44,"tag":76,"props":1264,"children":1266},{"id":1265},"deficiency",[1267],{"type":49,"value":1268},"Deficiency",{"type":44,"tag":52,"props":1270,"children":1271},{},[1272],{"type":49,"value":1273},"A deficiency in internal control exists when the design or operation of a control does not allow management or employees, in the normal course of performing their assigned functions, to prevent or detect misstatements on a timely basis.",{"type":44,"tag":52,"props":1275,"children":1276},{},[1277],{"type":44,"tag":56,"props":1278,"children":1279},{},[1280],{"type":49,"value":1281},"Evaluation factors:",{"type":44,"tag":172,"props":1283,"children":1284},{},[1285,1290,1295],{"type":44,"tag":92,"props":1286,"children":1287},{},[1288],{"type":49,"value":1289},"What is the likelihood that the control failure could result in a misstatement?",{"type":44,"tag":92,"props":1291,"children":1292},{},[1293],{"type":49,"value":1294},"What is the magnitude of the potential misstatement?",{"type":44,"tag":92,"props":1296,"children":1297},{},[1298],{"type":49,"value":1299},"Is there a compensating control that mitigates the deficiency?",{"type":44,"tag":76,"props":1301,"children":1303},{"id":1302},"significant-deficiency",[1304],{"type":49,"value":1305},"Significant Deficiency",{"type":44,"tag":52,"props":1307,"children":1308},{},[1309],{"type":49,"value":1310},"A deficiency, or combination of deficiencies, that is less severe than a material weakness yet important enough to merit attention by those charged with governance.",{"type":44,"tag":52,"props":1312,"children":1313},{},[1314],{"type":44,"tag":56,"props":1315,"children":1316},{},[1317],{"type":49,"value":1318},"Indicators:",{"type":44,"tag":172,"props":1320,"children":1321},{},[1322,1327,1332,1337],{"type":44,"tag":92,"props":1323,"children":1324},{},[1325],{"type":49,"value":1326},"The deficiency could result in a misstatement that is more than inconsequential but less than material",{"type":44,"tag":92,"props":1328,"children":1329},{},[1330],{"type":49,"value":1331},"There is more than a remote (but less than reasonably possible) likelihood of a material misstatement",{"type":44,"tag":92,"props":1333,"children":1334},{},[1335],{"type":49,"value":1336},"The control is a key control and the deficiency is not fully mitigated by compensating controls",{"type":44,"tag":92,"props":1338,"children":1339},{},[1340],{"type":49,"value":1341},"Combination of individually minor deficiencies that together represent a significant concern",{"type":44,"tag":76,"props":1343,"children":1345},{"id":1344},"material-weakness",[1346],{"type":49,"value":1347},"Material Weakness",{"type":44,"tag":52,"props":1349,"children":1350},{},[1351],{"type":49,"value":1352},"A deficiency, or combination of deficiencies, such that there is a reasonable possibility that a material misstatement of the financial statements will not be prevented or detected on a timely basis.",{"type":44,"tag":52,"props":1354,"children":1355},{},[1356],{"type":44,"tag":56,"props":1357,"children":1358},{},[1359],{"type":49,"value":1318},{"type":44,"tag":172,"props":1361,"children":1362},{},[1363,1368,1373,1378,1383],{"type":44,"tag":92,"props":1364,"children":1365},{},[1366],{"type":49,"value":1367},"Identification of fraud by senior management (any magnitude)",{"type":44,"tag":92,"props":1369,"children":1370},{},[1371],{"type":49,"value":1372},"Restatement of previously issued financial statements to correct a material error",{"type":44,"tag":92,"props":1374,"children":1375},{},[1376],{"type":49,"value":1377},"Identification by the auditor of a material misstatement that would not have been detected by the company's controls",{"type":44,"tag":92,"props":1379,"children":1380},{},[1381],{"type":49,"value":1382},"Ineffective oversight of financial reporting by the audit committee",{"type":44,"tag":92,"props":1384,"children":1385},{},[1386],{"type":49,"value":1387},"Deficiency in a pervasive control (entity-level, IT general control) affecting multiple processes",{"type":44,"tag":76,"props":1389,"children":1391},{"id":1390},"deficiency-aggregation",[1392],{"type":49,"value":1393},"Deficiency Aggregation",{"type":44,"tag":52,"props":1395,"children":1396},{},[1397],{"type":49,"value":1398},"Individual deficiencies that are not significant individually may be significant in combination:",{"type":44,"tag":88,"props":1400,"children":1401},{},[1402,1407,1412,1417],{"type":44,"tag":92,"props":1403,"children":1404},{},[1405],{"type":49,"value":1406},"Identify all deficiencies in the same process or affecting the same assertion",{"type":44,"tag":92,"props":1408,"children":1409},{},[1410],{"type":49,"value":1411},"Evaluate whether the combined effect could result in a material misstatement",{"type":44,"tag":92,"props":1413,"children":1414},{},[1415],{"type":49,"value":1416},"Consider whether deficiencies in compensating controls exacerbate other deficiencies",{"type":44,"tag":92,"props":1418,"children":1419},{},[1420],{"type":49,"value":1421},"Document the aggregation analysis and conclusion",{"type":44,"tag":76,"props":1423,"children":1425},{"id":1424},"remediation",[1426],{"type":49,"value":1427},"Remediation",{"type":44,"tag":52,"props":1429,"children":1430},{},[1431],{"type":49,"value":1432},"For each identified deficiency:",{"type":44,"tag":88,"props":1434,"children":1435},{},[1436,1446,1456,1466,1476],{"type":44,"tag":92,"props":1437,"children":1438},{},[1439,1444],{"type":44,"tag":56,"props":1440,"children":1441},{},[1442],{"type":49,"value":1443},"Root cause analysis:",{"type":49,"value":1445}," Why did the control fail? (design gap, execution failure, staffing, training, system issue)",{"type":44,"tag":92,"props":1447,"children":1448},{},[1449,1454],{"type":44,"tag":56,"props":1450,"children":1451},{},[1452],{"type":49,"value":1453},"Remediation plan:",{"type":49,"value":1455}," Specific actions to fix the control (redesign, additional training, system enhancement, added review)",{"type":44,"tag":92,"props":1457,"children":1458},{},[1459,1464],{"type":44,"tag":56,"props":1460,"children":1461},{},[1462],{"type":49,"value":1463},"Timeline:",{"type":49,"value":1465}," Target date for remediation completion",{"type":44,"tag":92,"props":1467,"children":1468},{},[1469,1474],{"type":44,"tag":56,"props":1470,"children":1471},{},[1472],{"type":49,"value":1473},"Owner:",{"type":49,"value":1475}," Person responsible for implementing the remediation",{"type":44,"tag":92,"props":1477,"children":1478},{},[1479,1484],{"type":44,"tag":56,"props":1480,"children":1481},{},[1482],{"type":49,"value":1483},"Validation:",{"type":49,"value":1485}," How and when the remediated control will be re-tested to confirm effectiveness",{"type":44,"tag":69,"props":1487,"children":1489},{"id":1488},"common-control-types",[1490],{"type":49,"value":1491},"Common Control Types",{"type":44,"tag":76,"props":1493,"children":1495},{"id":1494},"it-general-controls-itgcs",[1496],{"type":49,"value":1497},"IT General Controls (ITGCs)",{"type":44,"tag":52,"props":1499,"children":1500},{},[1501],{"type":49,"value":1502},"Controls over the IT environment that support the reliable functioning of application controls and automated processes.",{"type":44,"tag":52,"props":1504,"children":1505},{},[1506],{"type":44,"tag":56,"props":1507,"children":1508},{},[1509],{"type":49,"value":1510},"Access Controls:",{"type":44,"tag":172,"props":1512,"children":1513},{},[1514,1519,1524,1529,1534,1539],{"type":44,"tag":92,"props":1515,"children":1516},{},[1517],{"type":49,"value":1518},"User access provisioning (new access requests require approval)",{"type":44,"tag":92,"props":1520,"children":1521},{},[1522],{"type":49,"value":1523},"User access de-provisioning (terminated users removed timely)",{"type":44,"tag":92,"props":1525,"children":1526},{},[1527],{"type":49,"value":1528},"Privileged access management (admin\u002Fsuperuser access restricted and monitored)",{"type":44,"tag":92,"props":1530,"children":1531},{},[1532],{"type":49,"value":1533},"Periodic access reviews (user access recertified on a defined schedule)",{"type":44,"tag":92,"props":1535,"children":1536},{},[1537],{"type":49,"value":1538},"Password policies (complexity, rotation, lockout)",{"type":44,"tag":92,"props":1540,"children":1541},{},[1542],{"type":49,"value":1543},"Segregation of duties enforcement (conflicting access prevented)",{"type":44,"tag":52,"props":1545,"children":1546},{},[1547],{"type":44,"tag":56,"props":1548,"children":1549},{},[1550],{"type":49,"value":1551},"Change Management:",{"type":44,"tag":172,"props":1553,"children":1554},{},[1555,1560,1565,1570,1575],{"type":44,"tag":92,"props":1556,"children":1557},{},[1558],{"type":49,"value":1559},"Change requests documented and approved before implementation",{"type":44,"tag":92,"props":1561,"children":1562},{},[1563],{"type":49,"value":1564},"Changes tested in a non-production environment before promotion",{"type":44,"tag":92,"props":1566,"children":1567},{},[1568],{"type":49,"value":1569},"Separation of development and production environments",{"type":44,"tag":92,"props":1571,"children":1572},{},[1573],{"type":49,"value":1574},"Emergency change procedures (documented, approved post-implementation)",{"type":44,"tag":92,"props":1576,"children":1577},{},[1578],{"type":49,"value":1579},"Change review and post-implementation validation",{"type":44,"tag":52,"props":1581,"children":1582},{},[1583],{"type":44,"tag":56,"props":1584,"children":1585},{},[1586],{"type":49,"value":1587},"IT Operations:",{"type":44,"tag":172,"props":1589,"children":1590},{},[1591,1596,1601,1606,1611],{"type":44,"tag":92,"props":1592,"children":1593},{},[1594],{"type":49,"value":1595},"Batch job monitoring and exception handling",{"type":44,"tag":92,"props":1597,"children":1598},{},[1599],{"type":49,"value":1600},"Backup and recovery procedures (regular backups, tested restores)",{"type":44,"tag":92,"props":1602,"children":1603},{},[1604],{"type":49,"value":1605},"System availability and performance monitoring",{"type":44,"tag":92,"props":1607,"children":1608},{},[1609],{"type":49,"value":1610},"Incident management and escalation procedures",{"type":44,"tag":92,"props":1612,"children":1613},{},[1614],{"type":49,"value":1615},"Disaster recovery planning and testing",{"type":44,"tag":76,"props":1617,"children":1619},{"id":1618},"manual-controls",[1620],{"type":49,"value":1621},"Manual Controls",{"type":44,"tag":52,"props":1623,"children":1624},{},[1625],{"type":49,"value":1626},"Controls performed by people using judgment, typically involving review and approval.",{"type":44,"tag":52,"props":1628,"children":1629},{},[1630],{"type":44,"tag":56,"props":1631,"children":1632},{},[1633],{"type":49,"value":1634},"Examples:",{"type":44,"tag":172,"props":1636,"children":1637},{},[1638,1643,1648,1653,1658,1663,1668],{"type":44,"tag":92,"props":1639,"children":1640},{},[1641],{"type":49,"value":1642},"Management review of financial statements and key metrics",{"type":44,"tag":92,"props":1644,"children":1645},{},[1646],{"type":49,"value":1647},"Supervisory approval of journal entries above a threshold",{"type":44,"tag":92,"props":1649,"children":1650},{},[1651],{"type":49,"value":1652},"Three-way match verification (PO, receipt, invoice)",{"type":44,"tag":92,"props":1654,"children":1655},{},[1656],{"type":49,"value":1657},"Account reconciliation preparation and review",{"type":44,"tag":92,"props":1659,"children":1660},{},[1661],{"type":49,"value":1662},"Physical inventory observation and count",{"type":44,"tag":92,"props":1664,"children":1665},{},[1666],{"type":49,"value":1667},"Vendor master data change approval",{"type":44,"tag":92,"props":1669,"children":1670},{},[1671],{"type":49,"value":1672},"Customer credit approval",{"type":44,"tag":52,"props":1674,"children":1675},{},[1676],{"type":44,"tag":56,"props":1677,"children":1678},{},[1679],{"type":49,"value":1680},"Key attributes to test:",{"type":44,"tag":172,"props":1682,"children":1683},{},[1684,1689,1694,1699,1704],{"type":44,"tag":92,"props":1685,"children":1686},{},[1687],{"type":49,"value":1688},"Was the control performed by the right person (proper authority)?",{"type":44,"tag":92,"props":1690,"children":1691},{},[1692],{"type":49,"value":1693},"Was it performed timely (within the required timeframe)?",{"type":44,"tag":92,"props":1695,"children":1696},{},[1697],{"type":49,"value":1698},"Is there evidence of the review (signature, initials, email, system log)?",{"type":44,"tag":92,"props":1700,"children":1701},{},[1702],{"type":49,"value":1703},"Did the reviewer have sufficient information to perform an effective review?",{"type":44,"tag":92,"props":1705,"children":1706},{},[1707],{"type":49,"value":1708},"Were exceptions identified and appropriately addressed?",{"type":44,"tag":76,"props":1710,"children":1712},{"id":1711},"automated-controls",[1713],{"type":49,"value":1714},"Automated Controls",{"type":44,"tag":52,"props":1716,"children":1717},{},[1718],{"type":49,"value":1719},"Controls enforced by IT systems without human intervention.",{"type":44,"tag":52,"props":1721,"children":1722},{},[1723],{"type":44,"tag":56,"props":1724,"children":1725},{},[1726],{"type":49,"value":1634},{"type":44,"tag":172,"props":1728,"children":1729},{},[1730,1735,1740,1745,1750,1755,1760,1765],{"type":44,"tag":92,"props":1731,"children":1732},{},[1733],{"type":49,"value":1734},"System-enforced approval workflows (cannot proceed without required approvals)",{"type":44,"tag":92,"props":1736,"children":1737},{},[1738],{"type":49,"value":1739},"Three-way match automation (system blocks payment if PO\u002Freceipt\u002Finvoice don't match)",{"type":44,"tag":92,"props":1741,"children":1742},{},[1743],{"type":49,"value":1744},"Duplicate payment detection (system flags or blocks duplicate invoices)",{"type":44,"tag":92,"props":1746,"children":1747},{},[1748],{"type":49,"value":1749},"Credit limit enforcement (system prevents orders exceeding credit limit)",{"type":44,"tag":92,"props":1751,"children":1752},{},[1753],{"type":49,"value":1754},"Automated calculations (depreciation, amortization, interest, tax)",{"type":44,"tag":92,"props":1756,"children":1757},{},[1758],{"type":49,"value":1759},"System-enforced segregation of duties (conflicting roles prevented)",{"type":44,"tag":92,"props":1761,"children":1762},{},[1763],{"type":49,"value":1764},"Input validation controls (required fields, format checks, range checks)",{"type":44,"tag":92,"props":1766,"children":1767},{},[1768],{"type":49,"value":1769},"Automated reconciliation matching",{"type":44,"tag":52,"props":1771,"children":1772},{},[1773],{"type":44,"tag":56,"props":1774,"children":1775},{},[1776],{"type":49,"value":1777},"Testing approach:",{"type":44,"tag":172,"props":1779,"children":1780},{},[1781,1786,1791],{"type":44,"tag":92,"props":1782,"children":1783},{},[1784],{"type":49,"value":1785},"Test design: Confirm the system configuration enforces the control as intended",{"type":44,"tag":92,"props":1787,"children":1788},{},[1789],{"type":49,"value":1790},"Test operating effectiveness: For automated controls, if the system configuration has not changed, one test of the control is typically sufficient for the period (supplemented by ITGC testing of change management)",{"type":44,"tag":92,"props":1792,"children":1793},{},[1794],{"type":49,"value":1795},"Verify change management ITGCs are effective (if system changed, re-test the control)",{"type":44,"tag":76,"props":1797,"children":1799},{"id":1798},"it-dependent-manual-controls",[1800],{"type":49,"value":1801},"IT-Dependent Manual Controls",{"type":44,"tag":52,"props":1803,"children":1804},{},[1805],{"type":49,"value":1806},"Manual controls that rely on the completeness and accuracy of system-generated information.",{"type":44,"tag":52,"props":1808,"children":1809},{},[1810],{"type":44,"tag":56,"props":1811,"children":1812},{},[1813],{"type":49,"value":1634},{"type":44,"tag":172,"props":1815,"children":1816},{},[1817,1822,1827,1832],{"type":44,"tag":92,"props":1818,"children":1819},{},[1820],{"type":49,"value":1821},"Management review of a system-generated exception report",{"type":44,"tag":92,"props":1823,"children":1824},{},[1825],{"type":49,"value":1826},"Supervisor review of a system-generated aging report to assess reserves",{"type":44,"tag":92,"props":1828,"children":1829},{},[1830],{"type":49,"value":1831},"Reconciliation using system-generated trial balance data",{"type":44,"tag":92,"props":1833,"children":1834},{},[1835],{"type":49,"value":1836},"Approval of transactions identified by a system-generated workflow",{"type":44,"tag":52,"props":1838,"children":1839},{},[1840],{"type":44,"tag":56,"props":1841,"children":1842},{},[1843],{"type":49,"value":1777},{"type":44,"tag":172,"props":1845,"children":1846},{},[1847,1852,1857],{"type":44,"tag":92,"props":1848,"children":1849},{},[1850],{"type":49,"value":1851},"Test the manual control (review, approval, follow-up on exceptions)",{"type":44,"tag":92,"props":1853,"children":1854},{},[1855],{"type":49,"value":1856},"AND test the completeness and accuracy of the underlying report\u002Fdata (IPE — Information Produced by the Entity)",{"type":44,"tag":92,"props":1858,"children":1859},{},[1860],{"type":49,"value":1861},"IPE testing confirms the data the reviewer relied on was complete and accurate",{"type":44,"tag":76,"props":1863,"children":1865},{"id":1864},"entity-level-controls",[1866],{"type":49,"value":1867},"Entity-Level Controls",{"type":44,"tag":52,"props":1869,"children":1870},{},[1871],{"type":49,"value":1872},"Broad controls that operate at the organizational level and affect multiple processes.",{"type":44,"tag":52,"props":1874,"children":1875},{},[1876],{"type":44,"tag":56,"props":1877,"children":1878},{},[1879],{"type":49,"value":1634},{"type":44,"tag":172,"props":1881,"children":1882},{},[1883,1888,1893,1898,1903,1908,1913,1918,1923],{"type":44,"tag":92,"props":1884,"children":1885},{},[1886],{"type":49,"value":1887},"Tone at the top \u002F code of conduct",{"type":44,"tag":92,"props":1889,"children":1890},{},[1891],{"type":49,"value":1892},"Risk assessment process",{"type":44,"tag":92,"props":1894,"children":1895},{},[1896],{"type":49,"value":1897},"Audit committee oversight of financial reporting",{"type":44,"tag":92,"props":1899,"children":1900},{},[1901],{"type":49,"value":1902},"Internal audit function and activities",{"type":44,"tag":92,"props":1904,"children":1905},{},[1906],{"type":49,"value":1907},"Fraud risk assessment and anti-fraud programs",{"type":44,"tag":92,"props":1909,"children":1910},{},[1911],{"type":49,"value":1912},"Whistleblower\u002Fethics hotline",{"type":44,"tag":92,"props":1914,"children":1915},{},[1916],{"type":49,"value":1917},"Management monitoring of control effectiveness",{"type":44,"tag":92,"props":1919,"children":1920},{},[1921],{"type":49,"value":1922},"Financial reporting competence (staffing, training, qualifications)",{"type":44,"tag":92,"props":1924,"children":1925},{},[1926],{"type":49,"value":1927},"Period-end financial reporting process (close procedures, GAAP compliance reviews)",{"type":44,"tag":52,"props":1929,"children":1930},{},[1931],{"type":44,"tag":56,"props":1932,"children":1933},{},[1934],{"type":49,"value":1935},"Significance:",{"type":44,"tag":172,"props":1937,"children":1938},{},[1939,1944,1949],{"type":44,"tag":92,"props":1940,"children":1941},{},[1942],{"type":49,"value":1943},"Entity-level controls can mitigate but typically cannot replace process-level controls",{"type":44,"tag":92,"props":1945,"children":1946},{},[1947],{"type":49,"value":1948},"Ineffective entity-level controls (especially audit committee oversight and tone at the top) are strong indicators of a material weakness",{"type":44,"tag":92,"props":1950,"children":1951},{},[1952],{"type":49,"value":1953},"Effective entity-level controls may reduce the extent of testing needed for process-level controls",{"items":1955,"total":2142},[1956,1977,1991,2003,2022,2035,2056,2076,2090,2105,2113,2126],{"slug":1957,"name":1957,"fn":1958,"description":1959,"org":1960,"tags":1961,"stars":1974,"repoUrl":1975,"updatedAt":1976},"algorithmic-art","create algorithmic art with p5.js","Creating algorithmic art using p5.js with seeded randomness and interactive parameter exploration. Use this when users request creating art using code, generative art, algorithmic art, flow fields, or particle systems. Create original algorithmic art rather than copying existing artists' work to avoid copyright violations.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[1962,1965,1968,1971],{"name":1963,"slug":1964,"type":16},"Creative","creative",{"name":1966,"slug":1967,"type":16},"Design","design",{"name":1969,"slug":1970,"type":16},"Generative Art","generative-art",{"name":1972,"slug":1973,"type":16},"JavaScript","javascript",161831,"https:\u002F\u002Fgithub.com\u002Fanthropics\u002Fskills","2026-04-06T17:56:15.455818",{"slug":1978,"name":1978,"fn":1979,"description":1980,"org":1981,"tags":1982,"stars":1974,"repoUrl":1975,"updatedAt":1990},"brand-guidelines","apply Anthropic brand colors and typography","Applies Anthropic's official brand colors and typography to any sort of artifact that may benefit from having Anthropic's look-and-feel. Use it when brand colors or style guidelines, visual formatting, or company design standards apply.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[1983,1986,1987],{"name":1984,"slug":1985,"type":16},"Branding","branding",{"name":1966,"slug":1967,"type":16},{"name":1988,"slug":1989,"type":16},"Typography","typography","2026-04-06T17:56:05.042852",{"slug":1992,"name":1992,"fn":1993,"description":1994,"org":1995,"tags":1996,"stars":1974,"repoUrl":1975,"updatedAt":2002},"canvas-design","create posters and visual art as PNG or PDF","Create beautiful visual art in .png and .pdf documents using design philosophy. You should use this skill when the user asks to create a poster, piece of art, design, or other static piece. Create original visual designs, never copying existing artists' work to avoid copyright violations.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[1997,1998,1999],{"name":1963,"slug":1964,"type":16},{"name":1966,"slug":1967,"type":16},{"name":2000,"slug":2001,"type":16},"PDF","pdf","2026-04-06T17:56:03.794732",{"slug":2004,"name":2004,"fn":2005,"description":2006,"org":2007,"tags":2008,"stars":1974,"repoUrl":1975,"updatedAt":2021},"claude-api","build apps with the Claude API","Reference for the Claude API \u002F Anthropic SDK — model ids, pricing, params, streaming, tool use, MCP, agents, caching, token counting, model migration.\nTRIGGER — read BEFORE opening the target file; don't skip because it \"looks like a one-liner\" — whenever: the prompt names Claude\u002FAnthropic in any form (Claude, Anthropic, Fable, Opus, Sonnet, Haiku, `anthropic`, `@anthropic-ai`, `claude-*`, `us.anthropic.*`, `[1m]`); the user asks about an LLM (pricing\u002Fmodel choice\u002Flimits\u002Fcaching) — never answer from memory; OR the task is LLM-shaped with provider unstated (agent\u002FMCP\u002Ftool-definition\u002Fmulti-agent\u002FRAG\u002FLLM-judge\u002Fcomputer-use; generate\u002Fsummarize\u002Fextract\u002Fclassify\u002Frewrite\u002Fconverse over NL; debugging refusals\u002Fcutoffs\u002Fstreaming\u002Ftool-calls\u002Ftokens).\nSKIP only when another provider is being worked on (overrides all triggers): OpenAI\u002FGPT\u002FGemini\u002FLlama\u002FMistral\u002FCohere\u002FOllama named in the query; OR `grep -rE 'openai|langchain_openai|google.generativeai|genai|mistralai|cohere|ollama'` over the project hits (run this grep FIRST if no provider named — don't Read the file).",{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[2009,2012,2013,2016,2018],{"name":2010,"slug":2011,"type":16},"Agents","agents",{"name":9,"slug":8,"type":16},{"name":2014,"slug":2015,"type":16},"Anthropic SDK","anthropic-sdk",{"name":2017,"slug":2004,"type":16},"Claude API",{"name":2019,"slug":2020,"type":16},"LLM","llm","2026-07-28T05:36:08.213335",{"slug":2023,"name":2023,"fn":2024,"description":2025,"org":2026,"tags":2027,"stars":1974,"repoUrl":1975,"updatedAt":2034},"doc-coauthoring","co-author documentation and technical specs","Guide users through a structured workflow for co-authoring documentation. Use when user wants to write documentation, proposals, technical specs, decision docs, or similar structured content. This workflow helps users efficiently transfer context, refine content through iteration, and verify the doc works for readers. Trigger when user mentions writing docs, creating proposals, drafting specs, or similar documentation tasks.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[2028,2031],{"name":2029,"slug":2030,"type":16},"Documentation","documentation",{"name":2032,"slug":2033,"type":16},"Technical Writing","technical-writing","2026-04-06T17:56:14.18897",{"slug":2036,"name":2036,"fn":2037,"description":2038,"org":2039,"tags":2040,"stars":1974,"repoUrl":1975,"updatedAt":2055},"docx","create and edit Word documents","Use this skill whenever the user wants to create, read, edit, or manipulate Word documents (.docx files) or Word templates (.dotx files). Triggers include: any mention of 'Word doc', 'word document', '.docx', '.dotx', or requests to produce professional documents with formatting like tables of contents, headings, page numbers, or letterheads. Also use when extracting or reorganizing content from .docx or .dotx files, inserting or replacing images in documents, performing find-and-replace in Word files, working with tracked changes or comments, or converting content into a polished Word document. If the user asks for a 'report', 'memo', 'letter', 'template', or similar deliverable as a Word or .docx file, use this skill. Do NOT use for PDFs, spreadsheets, Google Docs, or general coding tasks unrelated to document generation.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[2041,2044,2046,2049,2052],{"name":2042,"slug":2043,"type":16},"Documents","documents",{"name":2045,"slug":2036,"type":16},"DOCX",{"name":2047,"slug":2048,"type":16},"Office","office",{"name":2050,"slug":2051,"type":16},"Templates","templates",{"name":2053,"slug":2054,"type":16},"Word","word","2026-07-18T05:16:23.136271",{"slug":2057,"name":2057,"fn":2058,"description":2059,"org":2060,"tags":2061,"stars":1974,"repoUrl":1975,"updatedAt":2075},"frontend-design","design production-grade frontend interfaces","Guidance for distinctive, intentional visual design when building new UI or reshaping an existing one. Helps with aesthetic direction, typography, and making choices that don't read as templated defaults.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[2062,2063,2066,2069,2072],{"name":1966,"slug":1967,"type":16},{"name":2064,"slug":2065,"type":16},"Frontend","frontend",{"name":2067,"slug":2068,"type":16},"React","react",{"name":2070,"slug":2071,"type":16},"Tailwind CSS","tailwind-css",{"name":2073,"slug":2074,"type":16},"UI Components","ui-components","2026-04-06T17:56:16.723469",{"slug":2077,"name":2077,"fn":2078,"description":2079,"org":2080,"tags":2081,"stars":1974,"repoUrl":1975,"updatedAt":2089},"internal-comms","write internal company communications","A set of resources to help me write all kinds of internal communications, using the formats that my company likes to use. Claude should use this skill whenever asked to write some sort of internal communications (status reports, leadership updates, 3P updates, company newsletters, FAQs, incident reports, project updates, etc.).",{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[2082,2085,2086],{"name":2083,"slug":2084,"type":16},"Communications","communications",{"name":2050,"slug":2051,"type":16},{"name":2087,"slug":2088,"type":16},"Writing","writing","2026-04-06T17:56:20.695522",{"slug":2091,"name":2091,"fn":2092,"description":2093,"org":2094,"tags":2095,"stars":1974,"repoUrl":1975,"updatedAt":2104},"mcp-builder","build MCP servers","Guide for creating high-quality MCP (Model Context Protocol) servers that enable LLMs to interact with external services through well-designed tools. Use when building MCP servers to integrate external APIs or services, whether in Python (FastMCP) or Node\u002FTypeScript (MCP SDK).",{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[2096,2097,2100,2101],{"name":2010,"slug":2011,"type":16},{"name":2098,"slug":2099,"type":16},"API Development","api-development",{"name":2019,"slug":2020,"type":16},{"name":2102,"slug":2103,"type":16},"MCP","mcp","2026-04-06T17:56:10.357665",{"slug":2001,"name":2001,"fn":2106,"description":2107,"org":2108,"tags":2109,"stars":1974,"repoUrl":1975,"updatedAt":2112},"read edit and manipulate PDF files","Use this skill whenever the user wants to do anything with PDF files. This includes reading or extracting text\u002Ftables from PDFs, combining or merging multiple PDFs into one, splitting PDFs apart, rotating pages, adding watermarks, creating new PDFs, filling PDF forms, encrypting\u002Fdecrypting PDFs, extracting images, and OCR on scanned PDFs to make them searchable. If the user mentions a .pdf file or asks to produce one, use this skill.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[2110,2111],{"name":2042,"slug":2043,"type":16},{"name":2000,"slug":2001,"type":16},"2026-04-06T17:56:02.483316",{"slug":2114,"name":2114,"fn":2115,"description":2116,"org":2117,"tags":2118,"stars":1974,"repoUrl":1975,"updatedAt":2125},"pptx","create and edit PowerPoint presentations","Use this skill any time a .pptx or .potx file is involved in any way — as input, output, or both. This includes: creating slide decks, pitch decks, or presentations; reading, parsing, or extracting text from any .pptx or .potx file (even if the extracted content will be used elsewhere, like in an email or summary); editing, modifying, or updating existing presentations; combining or splitting slide files; working with templates (.potx), layouts, speaker notes, or comments. Trigger whenever the user mentions \"deck,\" \"slides,\" \"presentation,\" or references a .pptx or .potx filename, regardless of what they plan to do with the content afterward. If a .pptx or .potx file needs to be opened, created, or touched, use this skill.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[2119,2122],{"name":2120,"slug":2121,"type":16},"PowerPoint","powerpoint",{"name":2123,"slug":2124,"type":16},"Presentations","presentations","2026-07-18T05:16:24.1471",{"slug":2127,"name":2127,"fn":2128,"description":2129,"org":2130,"tags":2131,"stars":1974,"repoUrl":1975,"updatedAt":2141},"skill-creator","create and optimize agent skills","Create new skills, modify and improve existing skills, and measure skill performance. Use when users want to create a skill from scratch, edit, or optimize an existing skill, run evals to test a skill, benchmark skill performance with variance analysis, or optimize a skill's description for better triggering accuracy.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[2132,2133,2134,2137,2140],{"name":2010,"slug":2011,"type":16},{"name":2029,"slug":2030,"type":16},{"name":2135,"slug":2136,"type":16},"Evals","evals",{"name":2138,"slug":2139,"type":16},"Performance","performance",{"name":2032,"slug":2033,"type":16},"2026-04-19T06:45:40.804",490,{"items":2144,"total":2239},[2145,2159,2175,2191,2207,2214,2226],{"slug":2146,"name":2146,"fn":2147,"description":2148,"org":2149,"tags":2150,"stars":26,"repoUrl":27,"updatedAt":2158},"accessibility-review","run WCAG accessibility audits","Run a WCAG 2.1 AA accessibility audit on a design or page. Trigger with \"audit accessibility\", \"check a11y\", \"is this accessible?\", or when reviewing a design for color contrast, keyboard navigation, touch target size, or screen reader behavior before handoff.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[2151,2154,2155],{"name":2152,"slug":2153,"type":16},"Accessibility","accessibility",{"name":1966,"slug":1967,"type":16},{"name":2156,"slug":2157,"type":16},"WCAG","wcag","2026-04-06T17:58:05.682394",{"slug":2160,"name":2160,"fn":2161,"description":2162,"org":2163,"tags":2164,"stars":26,"repoUrl":27,"updatedAt":2174},"account-research","research accounts for sales intel","Research a company or person and get actionable sales intel. Works standalone with web search, supercharged when you connect enrichment tools or your CRM. Trigger with \"research [company]\", \"look up [person]\", \"intel on [prospect]\", \"who is [name] at [company]\", or \"tell me about [company]\".",{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[2165,2168,2171],{"name":2166,"slug":2167,"type":16},"CRM","crm",{"name":2169,"slug":2170,"type":16},"Research","research",{"name":2172,"slug":2173,"type":16},"Sales","sales","2026-04-06T17:56:41.410418",{"slug":2176,"name":2176,"fn":2177,"description":2178,"org":2179,"tags":2180,"stars":26,"repoUrl":27,"updatedAt":2190},"analyze","answer data questions and run analyses","Answer data questions -- from quick lookups to full analyses. Use when looking up a single metric, investigating what's driving a trend or drop, comparing segments over time, or preparing a formal data report for stakeholders.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[2181,2184,2187],{"name":2182,"slug":2183,"type":16},"Analytics","analytics",{"name":2185,"slug":2186,"type":16},"Data Analysis","data-analysis",{"name":2188,"slug":2189,"type":16},"SQL","sql","2026-04-06T17:57:21.593647",{"slug":2192,"name":2192,"fn":2193,"description":2194,"org":2195,"tags":2196,"stars":26,"repoUrl":27,"updatedAt":2206},"architecture","create and evaluate architecture decision records","Create or evaluate an architecture decision record (ADR). Use when choosing between technologies (e.g., Kafka vs SQS), documenting a design decision with trade-offs and consequences, reviewing a system design proposal, or designing a new component from requirements and constraints.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[2197,2200,2202,2203],{"name":2198,"slug":2199,"type":16},"ADR","adr",{"name":2201,"slug":2192,"type":16},"Architecture",{"name":2029,"slug":2030,"type":16},{"name":2204,"slug":2205,"type":16},"Engineering","engineering","2026-04-06T17:57:49.26444",{"slug":4,"name":4,"fn":5,"description":6,"org":2208,"tags":2209,"stars":26,"repoUrl":27,"updatedAt":28},{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[2210,2211,2212,2213],{"name":18,"slug":19,"type":16},{"name":14,"slug":15,"type":16},{"name":21,"slug":22,"type":16},{"name":24,"slug":25,"type":16},{"slug":2215,"name":2215,"fn":2216,"description":2217,"org":2218,"tags":2219,"stars":26,"repoUrl":27,"updatedAt":2225},"brand-review","review content against brand voice","Review content against your brand voice, style guide, and messaging pillars, flagging deviations by severity with specific before\u002Fafter fixes. Use when checking a draft before it ships, when auditing copy for voice consistency and terminology, or when screening for unsubstantiated claims, missing disclaimers, and other legal flags.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[2220,2221,2224],{"name":1984,"slug":1985,"type":16},{"name":2222,"slug":2223,"type":16},"Marketing","marketing",{"name":2087,"slug":2088,"type":16},"2026-04-06T17:58:19.548331",{"slug":2227,"name":2227,"fn":2228,"description":2229,"org":2230,"tags":2231,"stars":26,"repoUrl":27,"updatedAt":2238},"brand-voice-enforcement","enforce brand voice in content","This skill applies brand guidelines to content creation. It should be used when the user asks to \"write an email\", \"draft a proposal\", \"create a pitch deck\", \"write a LinkedIn post\", \"draft a presentation\", \"write a Slack message\", \"draft sales content\", or any content creation request where brand voice should be applied. Also triggers on \"on-brand\", \"brand voice\", \"enforce voice\", \"apply brand guidelines\", \"brand-aligned content\", \"write in our voice\", \"use our brand tone\", \"make this sound like us\", \"rewrite this in our tone\", or \"this doesn't sound on-brand\". Not for generating guidelines from scratch (use guideline-generation) or discovering brand materials (use discover-brand).\n",{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[2232,2233,2234,2237],{"name":1984,"slug":1985,"type":16},{"name":2083,"slug":2084,"type":16},{"name":2235,"slug":2236,"type":16},"Content Creation","content-creation",{"name":2087,"slug":2088,"type":16},"2026-04-06T18:00:23.528956",200]