qms-audit-expert
by alirezarezvaniqms-audit-expert is an ISO 13485 internal audit skill for medical device QMS teams. It supports risk-based audit planning, clause checklists, nonconformity classification, CAPA verification, external audit prep, and schedule optimization using included references and a Python tool.
This skill scores 82/100, which means it is a solid listing candidate for directory users who need ISO 13485 medical-device QMS audit support. The repository evidence shows clear triggers, substantive audit workflows, decision aids for nonconformity classification, and a practical scheduling script, giving agents more leverage than a generic prompt. Adoption friction remains because installation guidance is absent in the skill folder and regulatory-use boundaries could be clearer.
- Strong triggerability: frontmatter lists concrete use cases such as ISO 13485 audit, internal audit, CAPA verification, audit checklist, and audit schedule.
- Operationally useful content: SKILL.md describes audit planning, execution, nonconformity management, external audit preparation, references, and tools rather than remaining a placeholder.
- Good supporting materials: three references provide clause-by-clause ISO 13485 audit guidance, a nonconformity decision tree, and an internal audit playbook, plus a Python audit schedule optimizer for risk-based scheduling.
- No install command or README is present in the skill path, so users must infer installation from the broader repository conventions.
- The excerpts do not show explicit constraints or validation boundaries for regulatory advice, so users should treat outputs as audit-support material requiring qualified review.
Overview of qms-audit-expert skill
What qms-audit-expert is for
qms-audit-expert is an ISO 13485 internal audit skill for medical device Quality Management Systems. It helps an AI agent plan risk-based audits, build clause-oriented checklists, classify findings, connect nonconformities to CAPA, and prepare for certification or surveillance audit readiness.
Best fit for Quality Management teams
The qms-audit-expert skill is most useful for QA/RA teams, internal auditors, QMS managers, consultants, and founders preparing a medical device QMS for ISO 13485:2016 expectations. It is especially relevant when you need structure: audit scope, frequency, evidence sampling, interview questions, finding language, and closure verification.
What makes it more useful than a generic prompt
The repository includes practical ISO 13485 references, a nonconformity classification guide, and a Python audit schedule optimizer. That combination makes it stronger than asking a model to “make an audit checklist,” because it anchors the output in clause coverage, risk-based cadence, audit evidence methods, and major/minor/observation decision logic.
Adoption considerations
Use this skill as an audit support tool, not as a substitute for a qualified auditor or regulatory decision-maker. It can draft schedules, questions, rationales, and finding language, but your organization must verify clause interpretation, sampling adequacy, auditor independence, local regulatory expectations, and objective evidence.
How to Use qms-audit-expert skill
qms-audit-expert install and repository path
Install from the GitHub skill repository if your agent environment supports skill installation:
npx skills add alirezarezvani/claude-skills --skill qms-audit-expert
The source lives at:
ra-qm-team/skills/qms-audit-expert
After install, read SKILL.md first, then inspect the supporting files that materially affect output quality:
references/iso13485_audit_playbook.mdfor audit programme context and certification expectationsreferences/iso13485-audit-guide.mdfor clause-by-clause questions and evidence examplesreferences/nonconformity-classification.mdfor major/minor/observation logicscripts/audit_schedule_optimizer.pyfor risk-based scheduling support
Inputs that make the skill work well
For qms-audit-expert usage, give the agent operational facts instead of only a broad goal. Strong inputs include:
- QMS scope, product type, lifecycle stage, and applicable exclusions
- ISO 13485 clauses or processes in scope
- Previous audit dates, findings, CAPA status, and complaint or PMS trends
- Process risk level: high, medium, or low
- Available auditors and independence constraints
- Desired output: annual schedule, checklist, audit plan, finding classification, CAPA verification plan, or external-audit readiness review
A weak prompt is: “Create an ISO 13485 audit plan.”
A stronger prompt is: “Use qms-audit-expert to create a 12-month internal audit schedule for design control, CAPA, purchasing, production validation, document control, and complaint handling. Design control and CAPA are high risk; purchasing is medium; document control is low. Last CAPA audit found 3 minor NCs and 1 overdue effectiveness check. Include clause coverage, frequency rationale, auditor independence notes, and evidence to sample.”
Suggested workflow for an internal audit
Start with audit planning before checklist generation. Ask the skill to map QMS processes to ISO 13485 clauses, assign risk levels, and identify overdue or high-priority audits. If you have a process list in JSON, review scripts/audit_schedule_optimizer.py and use it to generate a schedule, then ask the skill to explain or refine the rationale.
Next, generate audit plans per process: scope, criteria, sample records, interview roles, objective evidence, and expected outputs. During audit execution, use the skill to turn raw observations into well-formed findings with evidence, requirement, deviation, classification, and recommended containment or CAPA linkage.
Prompt patterns that improve results
Ask for outputs in controlled formats when you need audit-ready material:
- “Create a clause-by-clause checklist for ISO 13485 Clause 7.3 with evidence examples.”
- “Classify these findings using the qms-audit-expert decision tree and explain why each is major, minor, observation, or no finding.”
- “Draft CAPA verification questions for a closed complaint-handling corrective action.”
- “Review this audit schedule for risk-based coverage gaps and auditor independence concerns.”
Include your actual evidence snippets when classifying nonconformities. The skill is much more reliable when it can compare a requirement, your procedure, and the observed deviation.
qms-audit-expert skill FAQ
Is qms-audit-expert only for ISO 13485?
Its core focus is ISO 13485 internal auditing for medical device QMS work. The playbook also discusses alignment concerns such as MDR, FDA QSR-style expectations, design controls, process validation, risk management, PMS, and CAPA, but the center of gravity remains ISO 13485 audit planning and execution.
When should I not use this skill?
Do not use qms-audit-expert as the final authority for regulatory compliance, certification strategy, legal interpretation, or product safety decisions. It is also a poor fit for unrelated management systems such as ISO 9001, ISO 27001, or SOC 2 unless you only need general audit structuring and will replace the clause logic yourself.
Can beginners use the qms-audit-expert skill?
Yes, but beginners should start with schedule and checklist generation rather than final finding disposition. Nonconformity classification requires judgment about recurrence, safety impact, procedure requirements, and objective evidence. If you are new to QMS auditing, use the skill’s output as a draft and have a qualified auditor review classifications.
How is it different from ordinary AI audit prompts?
A generic prompt may produce a plausible checklist but miss ISO 13485-specific expectations such as DHF traceability, validated process evidence, CAPA effectiveness, document control rigor, and risk-based audit frequency. The qms-audit-expert skill gives the agent a more specialized frame, including reference documents and a scheduling script.
How to Improve qms-audit-expert skill
Improve qms-audit-expert outputs with better context
The biggest improvement comes from giving real QMS context. Provide the process name, ISO clause, procedure title, record types, previous findings, complaint or NCR trends, and why the area is high or low risk. For finding review, include the exact requirement, observed evidence, sample size, and whether the issue is isolated or recurring.
Watch for common failure modes
The most common weak outputs are overbroad checklists, findings without objective evidence, unsupported major/minor classifications, and schedules that ignore auditor independence. Push the skill to justify each recommendation: “Show the requirement, evidence, risk rationale, and classification basis.” This helps avoid audit language that sounds confident but is not defensible.
Iterate after the first draft
Treat the first answer as a planning baseline. Ask follow-up questions such as:
- “Which ISO 13485 clauses are not covered by this audit programme?”
- “Where is the sampling plan too weak?”
- “Rewrite these findings so each has requirement, evidence, deviation, and risk impact.”
- “Separate correction, containment, corrective action, and effectiveness verification.”
This iteration is where qms-audit-expert for Quality Management becomes most valuable: it turns rough audit notes into structured, reviewable QMS artifacts.
Extend the skill for your organization
To improve local fit, add your company’s process map, audit procedure, finding template, risk scoring method, and examples of accepted findings. If your organization uses specific tools or naming conventions, include them in prompts or local references. Keep proprietary data controlled, but give enough structure for the skill to produce outputs that match your audit programme rather than a generic ISO 13485 template.