{
  "id": "uc_36cb394147d3",
  "slug": "automated-soc2-evidence-collector",
  "asset_type": "use_case",
  "name": "Continuous SOC 2 & ISO 27001 Infrastructure Evidence Collector",
  "tagline": "Collects weekly compliance evidence across GitHub branch-protection rules, Cloudflare WAF policies, WorkOS SSO logs, and dependency CVE scans.",
  "description_md": "### 1. The Workflow Bottleneck & Problem Statement\nEngineering leaders lose weeks every year manually taking screenshots of GitHub settings and cloud consoles for SOC 2 auditors.\n\n### 2. Synthesized Agent Architecture & Connected Stack\n**Continuous SOC 2 & ISO 27001 Infrastructure Evidence Collector** (`automated-soc2-evidence-collector`) is a verified production blueprint curated from **@cloudflare**'s real-world implementation.\n\n- **Primary Capability:** Collects weekly compliance evidence across GitHub branch-protection rules, Cloudflare WAF policies, WorkOS SSO logs, and dependency CVE scans.\n- **Connected Tool Stack:** GitHub MCP, Cloudflare MCP, WorkOS MCP, Google Drive\n- **Execution Governance:** `Read-Only Discovery` → `Deterministic Policy Check` → `Ask-First Human Approval`\n- **Certified Builder Source:** [@cloudflare](https://github.com/cloudflare/mcp-server-cloudflare)\n\n### 3. Step-by-Step Implementation Blueprint\n1. **Trigger & Data Ingestion:** Configure your agent routine to watch **GitHub MCP** on a scheduled cadence or event webhook. Treat all external text as untrusted data inside XML fences.\n2. **Cross-System Enrichment & Verification:** Query **Cloudflare MCP** to validate live capacity, account status, or code state before generating recommendations.\n3. **Human-in-the-Loop Action Staging:** Post a structured summary card to **Google Drive** with 1-click approve/edit controls so your team retains full oversight.\n\n### 4. Copy-Paste System Prompt & Routine Configuration\n```text\nImplement the 'Continuous SOC 2 & ISO 27001 Infrastructure Evidence Collector' workflow curated with @cloudflare.\n\n1. OBJECTIVE:\nCollects weekly compliance evidence across GitHub branch-protection rules, Cloudflare WAF policies, WorkOS SSO logs, and dependency CVE scans.\n\n2. CONNECTED TOOL STACK:\nGitHub MCP, Cloudflare MCP, WorkOS MCP, Google Drive\n\n3. STEP-BY-STEP EXECUTION LOOP:\n- Step A (Ingest & Ground): Query live inputs from GitHub MCP and cross-reference state in Cloudflare MCP.\n- Step B (Analyze & Validate): Apply strict filtering rules, verify schema/policy constraints, and flag any anomalies or missing fields.\n- Step C (Stage & Report): Prepare the structured output, draft replies/tickets in Google Drive, and request human confirmation before executing any external send or production write.\n```\n\n### 5. Measured ROI & Production Impact\n- **Verified Outcome:** Automates 90% of recurring technical compliance evidence collection with timestamped JSON/PDF artifacts.\n- **Builder Portfolio:** [Explore all capabilities by @cloudflare →](/u/cloudflare)\n",
  "primary_category": "security-ops",
  "categories_json": "[\"security-ops\", \"use-cases\"]",
  "tags_json": "[\"automated-soc2-evidence-collector\", \"use-case\", \"security-ops\", \"cloudflare\", \"github-mcp\", \"cloudflare-mcp\"]",
  "compatible_agents_json": "[\"grok-bot\", \"claude-code\", \"cursor\"]",
  "integrations_json": "[\"GitHub MCP\", \"Cloudflare MCP\", \"WorkOS MCP\", \"Google Drive\"]",
  "includes_json": "[]",
  "safety_level": "Read-Only / Ask-First",
  "safety_summary": "Verified capability blueprint by @cloudflare.",
  "share_url": "",
  "deep_link_uri": "",
  "mcp_endpoint": "",
  "mcp_transport": "http",
  "install_command": "npx lightstate inspect automated-soc2-evidence-collector",
  "skill_markdown": "",
  "starter_prompt": "Implement the 'Continuous SOC 2 & ISO 27001 Infrastructure Evidence Collector' workflow curated with @cloudflare.\n\n1. OBJECTIVE:\nCollects weekly compliance evidence across GitHub branch-protection rules, Cloudflare WAF policies, WorkOS SSO logs, and dependency CVE scans.\n\n2. CONNECTED TOOL STACK:\nGitHub MCP, Cloudflare MCP, WorkOS MCP, Google Drive\n\n3. STEP-BY-STEP EXECUTION LOOP:\n- Step A (Ingest & Ground): Query live inputs from GitHub MCP and cross-reference state in Cloudflare MCP.\n- Step B (Analyze & Validate): Apply strict filtering rules, verify schema/policy constraints, and flag any anomalies or missing fields.\n- Step C (Stage & Report): Prepare the structured output, draft replies/tickets in Google Drive, and request human confirmation before executing any external send or production write.",
  "project_url": "https://github.com/cloudflare/mcp-server-cloudflare",
  "repo_url": "https://github.com/cloudflare/mcp-server-cloudflare",
  "creator_handle": "cloudflare",
  "creator_name": "Cloudflare Developers",
  "creator_avatar_url": null,
  "creator_url": "https://x.com/cloudflare",
  "creator_platform": "x",
  "creator_cal_url": null,
  "claimed_by_user_id": null,
  "scouted_by_handle": null,
  "source_url": "https://github.com/cloudflare/mcp-server-cloudflare",
  "source_tweet_id": null,
  "source_origin": "certified_builder",
  "source_posted_at": null,
  "x_likes": 276,
  "x_bookmarks": 651,
  "x_retweets": 162,
  "x_views": 3864,
  "human_upvotes": 276,
  "human_installs": 276,
  "bot_pulls": 651,
  "pulse_score": 88,
  "gravity_rank_score": 2300.5,
  "is_featured": 0,
  "is_verified": 1,
  "is_sponsored": 0,
  "sponsor_tier": "free",
  "sponsor_label": "",
  "sponsor_cta_url": "",
  "sponsor_expires_at": null,
  "commercial_intent_score": 0,
  "status": "active",
  "created_at": "2026-10-24T20:00:00Z",
  "updated_at": "2026-10-24T20:00:00Z",
  "verified_at": null,
  "primitive": "use_case",
  "title": "Continuous SOC 2 & ISO 27001 Infrastructure Evidence Collector",
  "description": "Collects weekly compliance evidence across GitHub branch-protection rules, Cloudflare WAF policies, WorkOS SSO logs, and dependency CVE scans.",
  "category": "security-ops",
  "tags": "[\"automated-soc2-evidence-collector\", \"use-case\", \"security-ops\", \"cloudflare\", \"github-mcp\", \"cloudflare-mcp\"]",
  "agent_compatibility": "[\"grok-bot\", \"claude-code\", \"cursor\"]",
  "author_handle": "cloudflare",
  "author_name": "Cloudflare Developers",
  "author_avatar": null,
  "source_tweet_url": "https://github.com/cloudflare/mcp-server-cloudflare",
  "github_url": "https://github.com/cloudflare/mcp-server-cloudflare",
  "external_url": "https://github.com/cloudflare/mcp-server-cloudflare",
  "upvotes_count": 276,
  "installs_count": 276
}