{
  "id": "tpl_01eadef43a13",
  "slug": "soc2-continuous-control-evidence-snapshooter",
  "asset_type": "template",
  "name": "Continuous SOC2 Type II Evidence Snapshooter",
  "tagline": "Automatically collects weekly proof of branch-protection rules, PR review approvals, encrypted backups, and incident drills into a Notion compliance vault.",
  "description_md": "### Overview & Operational Goal\n**Continuous SOC2 Type II Evidence Snapshooter** (`soc2-continuous-control-evidence-snapshooter`) is a verified Grok Bot template designed and tested with **@steipete** ([`x.com/steipete`](https://x.com/steipete)).\n\nAutomatically collects weekly proof of branch-protection rules, PR review approvals, encrypted backups, and incident drills into a Notion compliance vault.\n\n### Required MCP Connectors & Permissions\n- **Required Connectors:** GitHub MCP, Cloudflare MCP, Supabase MCP, Notion MCP\n- **Routine / Trigger Schedule:** `0 6 * * 5 (6:00 AM Fridays)`\n- **Safety & Approval Boundary:** **Ask-First / Human-in-the-Loop** — never executes irreversible external sends, destructive deletions, or financial transactions without explicit user approval.\n\n### Copy-Paste System Prompt (`x.ai/bot/`)\n```markdown\nYou are Continuous SOC2 Type II Evidence Snapshooter (soc2-continuous-control-evidence-snapshooter), an autonomous security-ops agent running on Grok Bot. Mission: Automatically collects weekly proof of branch-protection rules, PR review approvals, encrypted backups, and incident drills into a Notion compliance vault. On every scheduled run (0 6 * * 5 (6:00 AM Fridays)) or user invocation: (1) Query read-only state across GitHub MCP, Cloudflare MCP, Supabase MCP, Notion MCP; (2) Cross-verify timestamps, identifiers, and metrics against source records with zero fabrication; (3) Synthesize a concise, prioritized executive report with exact links and diffs; (4) Stage any external messages, ticket updates, or configuration changes for explicit human approval before execution.\n```\n\n### Step-by-Step Deployment Guide\n1. Click **Open in Grok Bot** (`https://x.ai/bot/6QRJLyLvDbyeTBI97YaVA`) or create a new agent in your workspace.\n2. Paste the **System Prompt** above into the agent instructions block.\n3. Connect the required MCP integrations (GitHub MCP, Cloudflare MCP, Supabase MCP, Notion MCP) and verify read-only discovery first.\n4. Configure the routine schedule (`0 6 * * 5 (6:00 AM Fridays)`) and run a single manual test turn to validate the output schema.\n",
  "primary_category": "security-ops",
  "categories_json": "[\"security-ops\", \"grok-bot-template\"]",
  "tags_json": "[\"github-mcp\", \"cloudflare-mcp\", \"supabase-mcp\", \"grok-bot\", \"security-ops\"]",
  "compatible_agents_json": "[\"grok-bot\", \"claude-code\", \"cursor\"]",
  "integrations_json": "[\"GitHub MCP\", \"Cloudflare MCP\", \"Supabase MCP\", \"Notion MCP\"]",
  "includes_json": "[]",
  "safety_level": "Ask-First / Human-in-the-Loop",
  "safety_summary": "Verified capability blueprint by @steipete.",
  "share_url": "https://x.ai/bot/6QRJLyLvDbyeTBI97YaVA",
  "deep_link_uri": "https://x.ai/bot/6QRJLyLvDbyeTBI97YaVA",
  "mcp_endpoint": "",
  "mcp_transport": "http",
  "install_command": "open https://x.ai/bot/6QRJLyLvDbyeTBI97YaVA",
  "skill_markdown": "",
  "starter_prompt": "You are Continuous SOC2 Type II Evidence Snapshooter (soc2-continuous-control-evidence-snapshooter), an autonomous security-ops agent running on Grok Bot. Mission: Automatically collects weekly proof of branch-protection rules, PR review approvals, encrypted backups, and incident drills into a Notion compliance vault. On every scheduled run (0 6 * * 5 (6:00 AM Fridays)) or user invocation: (1) Query read-only state across GitHub MCP, Cloudflare MCP, Supabase MCP, Notion MCP; (2) Cross-verify timestamps, identifiers, and metrics against source records with zero fabrication; (3) Synthesize a concise, prioritized executive report with exact links and diffs; (4) Stage any external messages, ticket updates, or configuration changes for explicit human approval before execution.",
  "project_url": "https://x.ai/bot/6QRJLyLvDbyeTBI97YaVA",
  "repo_url": "",
  "creator_handle": "steipete",
  "creator_name": "Peter Steinberger (@steipete)",
  "creator_avatar_url": null,
  "creator_url": "https://x.com/steipete",
  "creator_platform": "x",
  "creator_cal_url": null,
  "claimed_by_user_id": null,
  "scouted_by_handle": null,
  "source_url": "https://x.ai/bot/6QRJLyLvDbyeTBI97YaVA",
  "source_tweet_id": null,
  "source_origin": "certified_builder",
  "source_posted_at": null,
  "x_likes": 194,
  "x_bookmarks": 893,
  "x_retweets": 223,
  "x_views": 2716,
  "human_upvotes": 194,
  "human_installs": 194,
  "bot_pulls": 893,
  "pulse_score": 81,
  "gravity_rank_score": 2318,
  "is_featured": 0,
  "is_verified": 1,
  "is_sponsored": 0,
  "sponsor_tier": "free",
  "sponsor_label": "",
  "sponsor_cta_url": "",
  "sponsor_expires_at": null,
  "commercial_intent_score": 0,
  "status": "active",
  "created_at": "2026-10-24T22:25:00Z",
  "updated_at": "2026-10-24T22:25:00Z",
  "verified_at": null,
  "primitive": "template",
  "title": "Continuous SOC2 Type II Evidence Snapshooter",
  "description": "Automatically collects weekly proof of branch-protection rules, PR review approvals, encrypted backups, and incident drills into a Notion compliance vault.",
  "category": "security-ops",
  "tags": "[\"github-mcp\", \"cloudflare-mcp\", \"supabase-mcp\", \"grok-bot\", \"security-ops\"]",
  "agent_compatibility": "[\"grok-bot\", \"claude-code\", \"cursor\"]",
  "author_handle": "steipete",
  "author_name": "Peter Steinberger (@steipete)",
  "author_avatar": null,
  "source_tweet_url": "https://x.ai/bot/6QRJLyLvDbyeTBI97YaVA",
  "github_url": "",
  "external_url": "https://x.ai/bot/6QRJLyLvDbyeTBI97YaVA",
  "upvotes_count": 194,
  "installs_count": 194
}