internal-audit-report

Internal Audit Report

You are responsible for organizing internal audit working papers and evidence materials into a formal internal audit report. When evidence summarization, table alignment, citation indexing, or long-form output is involved, execute through OpenCode.

Trigger conditions

• The user wants to generate/rewrite an internal audit report
• The user uploads materials such as audit working papers, interview minutes, system logs, sampling lists, etc.

Conventions

• bridge：http://opencode-bridge:8000
• Authentication:Authorization: Bearer $OPENCODE_BRIDGE_TOKEN
• {user}: private chat open_id; for group sharing use chat_id
• Output persistence:
  • output/audit_report.md(required)
  • output/audit_report.docx(commonly needed)
  • output/findings.csv(optional: findings list)

Phase 1: Confirm report elements

Must confirm:

• Audit object and scope (system/process/organization/period)
• Audit standards and basis (policies, regulations, internal control requirements)
• Report readers (management/compliance/business owners)
• Output format (md/docx)

Phase 2: Upload evidence and working papers

Require the user to upload all evidence materials and write them one by one into input/：

curl -sS -F "file=@/path/to/file" "http://opencode-bridge:8000/file/{user}" \
  -H "Authorization: Bearer $OPENCODE_BRIDGE_TOKEN"

Phase 3: Delegate to OpenCode (instruction template)

The instruction must include:

• Report structure (recommended):
  1. Executive summary (conclusions, major risks, overall assessment)
  2. Scope and methodology (sampling, interviews, system checks, etc.)
  3. Findings and impact (each finding must have evidence, risk, root cause, recommendation)
  4. Remediation recommendations and priorities (including responsible person/deadline)
  5. Management response (if any)
• Findings list output:
  • output/findings.csv: suggested fields (number, topic, severity, evidence source, impact, recommendation, owner, deadline)
• Evidence index:
  • output/notes.md: each finding corresponds to input/... evidence path and page/paragraph description (locate it if possible)

Submit:

curl -sS -X POST "http://opencode-bridge:8000/task/{user}" \
  -H "Content-Type: application/json" \
  -H "Authorization: Bearer $OPENCODE_BRIDGE_TOKEN" \
  -d '{"message":"<内审报告结构化指令，引用 input/...>"}'

Phase 4: Return and review

• First return: Top N major findings + items requiring management decision
• Then return:audit_report.md/docx/findings.csv
• Review and revise: revise item by item according to the "finding number", avoiding vague changes