Skip to content
v0.1.3latest release121 skills4 categories6 sub-categories247 tested scripts397 reference docsContact us
Vector Agentic Skills
Submit a skill

internal-audit-schedule-planner

Plan a risk-based ISO 9001 internal audit programme (clause 9.2, ISO 19011): audit frequency per process from risk, previous results and changes; a load-balanced 12-month calendar that schedules overdue and never-audited processes first; auditor assignment that never puts an auditor in their own department; clause coverage check so every clause family 4-10 is audited each cycle; audit types (process, clause, product, trail, layered); auditor competence, independence and pool sizing; programme records and tracking. Use when building or revising the annual internal audit schedule, preparing for certification or surveillance, after a finding that the audit programme is not risk-based or does not cover all clauses, or when a small company needs independent auditors.

Manufacturing & Industrial Operations / Quality Management & ISO 9001v1.0.0Updated OCT 25 20262 references1 script

An internal audit programme must be planned, risk-based (importance, changes, previous results), cover the whole QMS and use auditors who are not auditing their own work. scripts/audit_schedule.py turns a process list into a 12-month programme with frequencies, months, independent auditors and a clause-coverage check.

Trigger Conditions

Activate this skill when the user:

  • Needs the annual internal audit schedule or programme
  • Asks how often to audit each process, or whether the programme is "risk-based"
  • Has a finding that not all clauses or processes were audited, or auditors audited their own area
  • Is a small company without enough independent auditors

For writing the checklist for each audit use iso-audit-checklist-generator.

Workflow

text
1. LIST      -> processes with department, clauses in scope, risk, last result, recent change, last audit date
2. AUDITORS  -> trained auditors and their departments
3. PLAN      -> python scripts/audit_schedule.py processes.csv --start 2027-01 --auditors auditors.csv
4. COVERAGE  -> fix AS001: add missing clause families to a process scope (usually 4, 6, 9.3, 10)
5. AGREE     -> confirm dates with process owners; publish a quarter ahead
6. TRACK     -> completion % monthly; review the programme at management review

Frequency Rules

SituationAudits per year
High risk (customer-facing, special characteristics, special processes)2
Medium / low risk1
Major finding last time, or significant change+1
Low risk with good results (--biennial-low, only if the CB accepts it)0.5

Overdue or never-audited processes go into the first quarter; other audits land near their due month in the least-loaded month. Frequency factors, coverage matrix, audit types and programme records: risk-based-programme.md.

Checks (audit_schedule.py)

CodeSeverityFinding
AS001highA clause family (4-10) is not covered this cycle
AS002highNo independent auditor for a process
AS003mediumProcess overdue (scheduled in the first quarter)
AS004lowProcess never audited
text
2027-01  Purchasing                    high    8.4                   A. Khan
2027-05  Purchasing                    high    8.4                   A. Khan
AS003 [medium] Purchasing: last audited 2026-06-01 (7 months ago, interval 4)
AS001 [high] clause 10 is not covered by any audit this cycle; add it to a process scope

Independence rules, ISO 19011 competence evidence, pool sizing and small-company options: auditor-competence-independence.md.

Output Format

Deliver:

  1. Programme table - month, process, risk, clauses, auditor (from audit_schedule.py).
  2. Rationale - why each process has its frequency (risk, results, changes).
  3. Coverage - process x clause confirmation that 4-10 are all covered.
  4. Auditor plan - who audits what, independence and competence gaps, training needed.
  5. Tracking - how completion and follow-up will be reported.

Scripts

bash
python scripts/audit_schedule.py processes.csv --start 2027-01 --auditors auditors.csv
python scripts/audit_schedule.py processes.csv --start 2027-01 --biennial-low --csv > programme.csv

Processes CSV: process, department, clauses (;-separated), risk, last_result (none/good/minor/major), changed, last_audit. Auditors CSV: auditor, department. Exit codes: 0 complete, 1 coverage or independence problems, 2 read or usage error.

Additional Resources

FileContent
risk-based-programme.md9.2.2 requirements, frequency factors, coverage matrix, audit types, records, tracking
auditor-competence-independence.mdIndependence, ISO 19011 competence, pool sizing, small-company options
More in Quality Management & ISO 9001

8d-problem-solving-report-writer

Write and review 8D problem-solving reports for customer complaints and serious nonconformities (automotive and aerospace practice: Ford Global 8D, VDA, GM, Stellantis formats): D0 emergency response, D1 cross-functional team and champion, D2 problem description with 5W2H and is / is-not and no cause in the statement, D3 interim containment within 24 hours with verification and clean point, D4 verified occurrence and escape (non-detection) root causes plus systemic cause, D5 permanent corrective actions for each cause verified before implementation, D6 implementation, validation with production data and removal of containment, D7 PFMEA, control plan and read-across to similar products, D8 closure and recognition. Checks an 8D discipline by discipline for missing content, human-error root causes, missing escape cause or action, late containment and dates out of order.

acceptance-sampling-plan-selector

Select and evaluate acceptance sampling plans for incoming, in-process and final inspection: ANSI/ASQ Z1.4 / ISO 2859-1 single sampling under normal inspection (code letter from lot size and inspection level I, II, III, S-1 to S-4; sample size, Ac and Re from AQL, following the table's arrows to the correct plan; 100% when n reaches the lot size; AQLs above 10 per 100 units), operating characteristic curves (Pa at any quality, producer's quality level, indifference point, LTPD, AOQ and AOQL, binomial or hypergeometric), plans designed from producer and consumer risk, and c = 0 zero-acceptance plans. Covers AQL choice by defect class, switching rules between normal, tightened and reduced inspection, when sampling is not appropriate, and random sampling.

approved-supplier-list-manager

Manage and audit an approved supplier list (ASL) / external provider register for ISO 9001 8.4.1, IATF 16949 8.4 and AS9100 8.4.1: supplier status (approved, conditional, probation, pending, disqualified), scope of approval by commodity and process, risk class, certification and expiry, re-evaluation intervals by risk, conditions with end dates, single-source contingency, approver and customer-directed sources. Audits the list for expired or expiring certificates, overdue re-evaluations, conditional or probation status past its decision date, high-risk suppliers without the required certification, single-source suppliers without backup and missing approvers, and checks purchase orders for suppliers that are off-list, disqualified or pending, or buying outside the approved scope. Covers ERP blocks, PO requirements, off-list and emergency purchases.

apqp-phase-planner

Plan and track Advanced Product Quality Planning (AIAG APQP 3rd edition, IATF 16949) for a new or changed automotive part: back-schedule the five phases (plan and define, product design, process design, product and process validation, launch and feedback) from the start-of-production date by program complexity, with overlap, PPAP lead and safe-launch period; list the deliverables and gate for each phase (DFMEA, DVP&R, feasibility, process flow, PFMEA, control plans, MSA, Ppk, run at rate, PPAP, safe launch, lessons learned); adjust for build-to-print suppliers; flag compressed timelines and late or untracked deliverables against a status list. Covers gate reviews, red/yellow/green status reporting, run at rate and safe-launch exit criteria.

as9100-gap-analyzer

Run an AS9100D / EN 9100:2018 gap analysis for aviation, space and defence suppliers on the requirements added to ISO 9001: on-time delivery and conformity focus, management representative, ethics and human-factors awareness, operational planning and operational risk management, configuration management, product safety, counterfeit-part prevention, special requirements, critical items and key characteristics, external provider register and flow-down, FOD prevention, tooling and NC program control, special process validation, first article inspection (AS9102), traceability, in-service data and nonconforming product control. Generates and scores a worksheet, grades missing core controls as major, and checks invalid n/a claims. Covers AS9101/AS9104, OASIS, AS9102 FAI forms, counterfeit standards (AS5553, AS6174, AS6081), NADCAP and the planned IA9100 transition.

audit-report-writer

Write internal, supplier and pre-certification audit reports with the content ISO 19011:2018 6.5 expects: audit objectives, scope, criteria with revisions, dates, team and auditees, method and sampling statement, specific strengths, findings table and three-part finding details (requirement, evidence, statement), conclusion on the degree of fulfilment of criteria, diverging opinions, follow-up deadlines and distribution. Builds a Markdown report from a JSON audit record, generates the conclusion from the findings (major / minor / none) and flags reports missing required content or findings without clause or evidence. Covers conclusion wording, closing meetings, response expectations and verifying corrective actions.