Example Conversation

You: We want to run a gap assessment for SafeBuild Construction. We’ve been doing safety management for years but never had a formal system. We have some documentation – a safety policy, some risk assessments, and training records – but it’s inconsistent.

Agent: That’s a common starting point for construction companies. Let me begin by scanning your workspace for existing documentation and then work through each clause area. First, do you have an organization profile from the Organization Profile skill?

You: Yes, we completed that already. The organization-profile.json is in the workspace.

Agent: I’ll reference it for context. Let me start with the mandatory artifact scan.

mandatory_artifact_detector_ohs results:

Artifact	Clause	Status
OH&S Policy	5.2	FOUND
OHSMS Scope Statement	4.3	FOUND
Hazard Register / Risk Assessment	6.1.2	MISSING
Legal Register	6.1.3	MISSING
OH&S Objectives	6.2	MISSING
Emergency Plan	8.2	FOUND
Competence Records	7.2	FOUND
Operational Controls / SOPs	8.1	MISSING
Management of Change	8.1.3	MISSING
Contractor Management	8.1.4	MISSING
Monitoring & Measurement	9.1	MISSING
Internal Audit Results	9.2	MISSING
Management Review	9.3	MISSING
Incident Investigation Records	10.2	MISSING

You have 5 of 15 expected artifacts. The core planning documents (clauses 6.x) and the entire check-act cycle (clauses 9.x and 10.x) are missing. Let me now assess each clause area in detail. Starting with Clause 4 – what documentation do you have for understanding your organization’s context?

You: The organization profile covers that. For interested parties, we know who they are but haven’t documented it formally beyond what’s in the profile. We don’t have a formal process for reviewing context changes.

Agent: I’ll rate Clause 4 accordingly. Now for Clause 6 – hazard identification and risk assessment. You mentioned you have some risk assessments. How are they structured? Are they activity-based, site-based, or task-based? How often are they reviewed?

You: We have generic risk assessments for main activities – working at heights, excavation, crane operations. They were written about 3 years ago by a consultant. We also do daily pre-start checklists on site, but those aren’t linked to the risk assessments.

Agent: Three-year-old generic risk assessments from a consultant are a common finding. They’re likely not specific to your current sites, don’t reflect changes in work methods, and won’t satisfy Clause 6.1.2 which requires a systematic, ongoing process. The pre-start checklists are a good practice but need to be connected to the formal hazard identification process.

Let me rate all clause areas now using batch mode.

maturity_rating_tool_ohs – batch results:

Clause	Area	Maturity	Key Finding
4.1	Context of the organization	2	Profile exists but no review process
4.2	Interested parties	2	Identified but not formally managed
5.1	Leadership and commitment	2	Commitment exists but not systematic
5.2	OH&S policy	3	Policy exists, needs commitment review
5.3	Roles and responsibilities	1	HSE manager defined, others informal
6.1	Hazard identification and risk assessment	1	Outdated generic assessments
6.1.3	Legal requirements	0	No legal register
6.2	OH&S objectives	0	No formal objectives
7.2	Competence	2	Training records exist, no matrix
7.4	Communication	1	Toolbox talks, no formal procedure
8.1	Operational controls	1	Pre-start checklists only
8.2	Emergency preparedness	2	Plan exists, drills inconsistent
9.1	Monitoring and measurement	0	No systematic monitoring
9.2	Internal audit	0	No audit program
9.3	Management review	0	No formal reviews
10.2	Incident investigation	1	Ad hoc, no root cause analysis

Overall average maturity: 1.1 out of 5. This is typical for a construction company that has been managing safety informally. The remediation roadmap will prioritize the foundation items first.

Running the remaining validation tools and building the roadmap…

clause_requirements_engine_ohs – 23 clause areas assessed, 9 with substantive coverage, 14 with gaps.

remediation_prioritizer_ohs – four-phase roadmap produced. Phase 1 targets are achievable within 8-10 weeks.

Gap assessment report and findings JSON saved to output/.

Sample Output Excerpt

The skill produces a comprehensive gap assessment report and a machine-readable findings JSON. Here is a representative excerpt from the gap assessment report.

ISO 45001:2018 Gap Assessment Report

Organization: SafeBuild Construction Pty Ltd Assessment date: 2026-03-31 | Assessor: Agent-assisted Scope: All commercial construction activities across 3 sites and head office

Executive Summary

SafeBuild Construction’s current OH&S practices achieve an average maturity of 1.1 out of 5.0 against ISO 45001:2018 requirements. The organization has foundational elements in place (OH&S policy, emergency plan, training records) but lacks the systematic framework required for certification. Key gaps include: no formal hazard identification and risk assessment process, no legal register, no OH&S objectives, no internal audit program, and no management review process.

Stage 1 audit readiness: 33% (5 of 15 mandatory artifacts present)

Remediation Roadmap

Phase 1 – Foundation (Weeks 1-8)

Phase 2 – Core (Weeks 5-14)

Phase 3 – Operational (Weeks 10-20)

Phase 4 – Validation (Weeks 18-26)

Extension Tools

mandatory_artifact_detector_ohs

Scans the workspace for expected ISO 45001:2018 mandatory documented information. Reports found and missing artifacts with clause references.

maturity_rating_tool_ohs

Rates clause maturity on a 0-5 scale using OH&S-specific evidence indicators. Supports batch mode to rate all clauses in a single call.

clause_requirements_engine_ohs

Validates workspace documents against ISO 45001 clause 4-10 content requirements using keyword analysis. For each sub-clause, checks whether required OH&S topics are substantively addressed.

• Input: Path to the workspace root directory
• Output: Clause-by-clause content validation report with coverage status for each sub-clause from 4.1 through 10.3

remediation_prioritizer_ohs

Builds a prioritized remediation roadmap from gap assessment findings, grouped into four phases.

Getting Started

Start by activating the ISO 45001 Gap Assessment skill. The agent will scan your workspace for existing documentation and then work through each clause area systematically.

Have this information ready:

• Any existing OH&S policies, procedures, or safe work method statements
• Prior audit reports, inspection reports, or consultant assessments
• Incident and injury records for the last 2-3 years
• Existing risk assessments or hazard registers
• Training records and induction materials
• Emergency preparedness plans and drill records
• Management meeting minutes where safety was discussed
• Any existing certifications (ISO 9001, ISO 14001) that may share management system elements

If you completed the Organization Profile skill first, the agent will automatically reference organization-profile.json for organizational context. This is recommended but not required – the gap assessment can proceed with information gathered through conversation.

The agent runs all four validation tools automatically: artifact detection, maturity rating, clause requirements validation, and remediation prioritization. The final deliverables include a markdown gap assessment report and a machine-readable findings JSON that other OHSMS skills can reference.