Auditoria Skills

io.github.marcelineroPublished by GitHub account marcelinerov2.2.5Updated Oct 24, 2026

20 SKILLs de auditoría interna para agentes de IA según IIA, COSO, NIST, ISO, COBIT y ACFE.

VerifiedSTDIODesktop onlyKnowledge & MemoryBusiness & Commerce

Overview

AI-generated overview

A local MCP server that gives an assistant 20 Spanish-language internal-audit skill documents grounded in IIA, COSO, NIST, ISO, COBIT and ACFE standards.

What you can do
List the 20 audit skills with their type, category and anchor standards, and search them by process or specialty type and by framework such as ISO, NIST or IIA. Load the full text of a chosen skill, covering cross-cutting processes like risk-based planning, control evaluation, sampling, workpapers, findings communication, follow-up and quality assurance. Retrieve specialty skills for financial, operational, IT, forensic, compliance, ESG, cybersecurity, AI, quality, environmental, performance and continuous auditing.
When to use it
Useful when an assistant should draft or structure internal-audit work — engagement plans, control matrices, sampling approaches, findings — aligned with recognized frameworks. Best suited to Spanish-speaking audit teams, since the skill content is written in Spanish.
Requirements
Runs locally over stdio via the uvx command, so the uv toolchain must be installed; no API keys, accounts or environment variables are declared. The package is fetched from PyPI, so network access is needed on first run and for updates.
Before you install
The skills are reference guidance, not professional audit advice or a substitute for judgment; verify that a skill reflects the current version of a standard. Installing and updating pulls third-party code from PyPI, and the README suggests running install scripts and cloning the repository for local customization.

Installation

In SourceWeft

  1. Open Auditoria Skills in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Other MCP clients

Follow the launch instructions in the repository.

README

auditoria-skills-mcp

mcp-name: io.github.marcelinero/auditoria-skills

Model Context Protocol (MCP) server exposing 20 internal-audit SKILLs grounded in globally accepted standards (IIA, COSO, NIST, ISO, IFRS, COBIT, ACFE). SKILLs are written in Spanish — the working language of the target audience.

Zero-install — one command, no repo cloning, no path configuration.

[PyPI] [License: CC BY-SA 4.0] [SKILLs]

Quickstart

Claude Desktop

Add to claude_desktop_config.json:

  • macOS: ~/Library/Application Support/Claude/claude_desktop_config.json
  • Windows: %APPDATA%\Claude\claude_desktop_config.json
json
{  "mcpServers": {    "auditoria-skills": {      "command": "uvx",      "args": ["auditoria-skills-mcp"]    }  }}

Restart Claude Desktop. No repo cloning, no absolute paths.

Claude Code (CLI)

bash
claude mcp add auditoria-skills -- uvx auditoria-skills-mcp

Prerequisite: uv

bash
# macOS / Linuxcurl -LsSf https://astral.sh/uv/install.sh | sh
# Windows (PowerShell)powershell -ExecutionPolicy ByPass -c "irm https://astral.sh/uv/install.ps1 | iex"

Mantener actualizado

uvx resuelve la versión en cada ejecución desde PyPI. Para forzar la última versión publicada:

bash
# Forzar última versión (recomendado tras una actualización de marcos)uvx auditoria-skills-mcp@latest
# Si quedó una versión vieja en caché, limpiarlauv cache clean auditoria-skills-mcp

Cuando un marco de referencia se revisa (COSO, NIST, IIA, ISO…), se publica una nueva versión en PyPI y queda registrada en el CHANGELOG. Si detectas que un estándar fue actualizado y el SKILL no lo refleja, abre un issue — no hace falta escribir código.

Personalizar para tu entidad

Los SKILLs son Markdown + YAML — editables, versionables, y reutilizables.

Opción 1: Adaptar localmente (sin PRs)

bash
# Clona el repogit clone https://github.com/marcelinero/auditoria-skills-mcp.gitcd auditoria-skills-mcp
# Edita los SKILLs en ./auditoria_skills_mcp/data/skills/# Ejemplo: ajusta matriz de controles en auditoria_skills_mcp/data/skills/procesos/evaluacion-controles/SKILL.md
# Ejecuta localmenteuv run python -m auditoria_skills_mcp

Esta es tu copia adaptada a tu contexto (matriz interna, normativa local, procedimientos propios). No requiere aprobación ni PRs.

Opción 2: Proponer mejoras genéricas (con PRs)

Si mejoras algo reutilizable para otros auditores, abre un Pull Request:

  • Claridad o completitud de un SKILL.
  • Actualización por cambio en estándar (COSO 2023, NIST 2.0, ISO nuevo).
  • Nuevo SKILL alineado con un estándar global.

Ver CONTRIBUTING.md para detalles.

Ciclo de vida de los SKILLs

NivelQué esQuiénControl
CanónicoVersión oficial en PyPIMantenedorCentralizado, sigue estándares globales
LocalAdaptado a tu entidadTúDescentralizado, sin tocar lo común
ComunitarioMejoras genéricas aceptadasPR + revisiónSe fusionan a main si pasan criterios

Available tools

ToolDescription
list_skillsList all 20 SKILLs with type, category, and anchor standards
get_skillLoad the full content of a SKILL by name
search_skillsFilter by type (proceso/especialidad) and/or framework (ISO, NIST, IIA…)

Included SKILLs

Process SKILLs — cross-cutting (8)

SKILLAnchor standards
planeacion-basada-riesgosIIA, COSO ERM, ISO 31000
evaluacion-controlesCOSO IC-IF, IIA, SOX 404
muestreoNIA/ISA 530, AICPA
papeles-trabajoNIA/ISA 230, IIA
comunicacion-hallazgosIIA Standards
seguimiento-recomendacionesIIA Standards
aseguramiento-calidadIIA, IIA QA Manual
analitica-datosGTAG 16, ISACA

Specialty SKILLs — by domain (12)

SKILLAnchor standards
auditoria-financieraNIA/ISA, NIIF/IFRS, SOX, COSO IC-IF
auditoria-operativaIIA, ISO 9001, INTOSAI
auditoria-tecnologia-informacionCOBIT 2019, ITAF, ISO 27001:2022
auditoria-forenseACFE, NIA 240, FATF
auditoria-cumplimientoISO 37301, ISO 37001:2025
auditoria-esg-sostenibilidadISSB IFRS S1/S2, GRI, TCFD, SASB, CSRD/ESRS (post-Ómnibus)
auditoria-ciberseguridadNIST CSF 2.0, ISO 27001/27002:2022, CIS v8.1
auditoria-inteligencia-artificialISO/IEC 42001, NIST AI RMF, EU AI Act
auditoria-calidadISO 9001, ISO 19011
auditoria-ambientalISO 14001, ISO 14064, GHG Protocol
auditoria-gestion-desempenoIIA, INTOSAI ISSAI, COSO ERM
auditoria-continuaGTAG 3, AICPA, ISACA

Usage examples

text
Load the auditoria-ciberseguridad SKILL and help me planan audit based on NIST CSF 2.0.
text
Which SKILLs in the catalog apply to ISO standards?
text
I'm doing a compliance audit for ISO 37301.Load the relevant SKILLs and build the engagement plan.

SKILLs catalog

This repository is the canonical source of the catalog. The 20 SKILLs live in auditoria_skills_mcp/data/skills/ — plain Markdown + YAML, readable directly on GitHub.

Issues and contributions (new SKILLs, framework updates) → open an issue.

Acerca de / About

Español: Servidor MCP con 20 SKILLs de auditoría interna redactadas en español neutro, ancladas a normas globales (IIA, COSO, NIST, ISO, IFRS, COBIT, ACFE). Cubre procesos transversales (planeación, muestreo, papeles de trabajo) y especialidades (financiera, TI, forense, ESG, ciberseguridad, IA y más).

License

CC BY-SA 4.0

Source: README.md at commit cdb95ec

Tools

0
SourceWeft has not started this package in its sandbox yet, so its tools are not known.

Version history

2
  1. v2.2.5LatestOct 8, 2026
  2. v2.2.3Sep 16, 2026

Score

50% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 days25 pts

    Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.

  • Auth declared10 pts

    Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.

  • Tools listed15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts