Compliance

skill-comply is a compliance-testing skill that checks whether an agent follows a skill, rule, or agent definition in real runs. It generates specs from markdown, runs three prompt strictness levels, classifies tool-call timelines, and reports compliance rates with evidence. Useful for skill-comply for Compliance Review.

quality-nonconformance is a regulated-manufacturing skill for NCR intake, root cause analysis, CAPA, SPC interpretation, and final disposition. Use it for Compliance Review, supplier quality issues, and evidence-based decisions where traceability, risk, and audit-ready judgment matter.

The logistics-exception-management skill helps handle freight delays, damage, loss, refusals, disputes, and claims with structured escalation, evidence review, and customer-ready next steps. Built for issue tracking and operational decision-making, it fits logistics teams that need repeatable guidance instead of a generic prompt.

hipaa-compliance is the HIPAA-specific entrypoint for healthcare privacy and security work. Use the hipaa-compliance skill when a task is explicitly about PHI, covered entities, BAAs, breach posture, or whether a workflow creates HIPAA exposure. It is a thin overlay for fast compliance triage and guidance.

healthcare-phi-compliance helps review healthcare apps for PHI/PII risk across data models, APIs, logs, and access paths. Use it to check data classification, access control, encryption, audit trails, and common leak vectors for HIPAA, DISHA, GDPR, and related security audit needs.

customs-trade-compliance is a trade compliance skill for customs documentation, HS/HTS classification, duty planning, restricted party screening, and Compliance Review. It helps users turn shipment facts into defensible import/export decisions with less guesswork than a generic prompt.

taxjar-automation is a Claude skill for TaxJar workflows through Composio Rube MCP. It guides agents to search current tools, verify the taxjar connection, and follow returned schemas before execution for Finance Operations tasks.

risk-management-specialist helps AI agents draft ISO 14971:2019 medical device risk work products, including plans, hazard analyses, FMEA tables, risk controls, residual risk summaries, and post-production review inputs. Includes references, templates, and helper scripts for Regulatory Affairs and Quality workflows.

regulatory-affairs-head is a Claude skill for medical device and HealthTech regulatory planning, including FDA 510(k), De Novo, PMA, EU MDR technical documentation, CE marking, global pathways, ISO mapping, deficiency responses, and submission tracking with included references and scripts.

qms-audit-expert is an ISO 13485 internal audit skill for medical device QMS teams. It supports risk-based audit planning, clause checklists, nonconformity classification, CAPA verification, external audit prep, and schedule optimization using included references and a Python tool.

mdr-745-specialist is an EU MDR 2017/745 compliance skill for device classification, Annex II/III technical documentation, clinical evidence, PMS/PMCF/PSUR planning, and notified body readiness. It includes MDR reference guides and a Python gap analyzer for structured compliance review.

The information-security-manager-iso27001 skill helps AI agents perform ISO 27001:2022 ISMS work for HealthTech, MedTech, and regulated software teams. Use it for risk assessment, Annex A control mapping, compliance review, evidence checklists, incident response planning, and audit gap analysis with included references and scripts.

gdpr-dsgvo-expert helps agents run GDPR/DSGVO Compliance Review with code scans, DPIA drafting, audit guidance, BDSG references, and DSAR deadline tracking. Use it to surface privacy risks and prepare evidence for DPO or legal review.

senior-secops is a Claude skill for application security reviews, vulnerability management, CVE triage, dependency risk, OWASP checks, and compliance guidance. It includes references for security standards and SOC 2, PCI-DSS, HIPAA, GDPR, plus scripts for code scanning, dependency assessment, and compliance checks.

iso27001-audit-prep is a focused ISO 27001 ISMS audit readiness skill. It uses six forcing questions to pressure-test scope, risk register freshness, Annex A linkage, management review, corrective actions, and sample-ready evidence before internal, certification, or surveillance audits.

soc2-audit-prep is a SOC 2 Type II compliance review skill that runs six observation-period forcing questions via /cs:soc2-audit-prep <scope>. Use it to pressure-test scope, TSC choices, skipped control cycles, evidence gaps, incidents, and audit readiness before fieldwork.

iso13485-audit-prep is a GitHub skill for ISO 13485 QMS compliance review. It pressure-tests DHF, CAPA, complaints, supplier controls, management review, and post-market evidence before audits, MDR/FDA QSR checks, launches, or CAPA follow-up.

gdpr-audit-prep helps teams pressure-test GDPR readiness with six Article-cited DPO questions for RoPA, lawful basis, DPIA, transfers, breach, retention, and evidence gaps before audits or due diligence.

fda-qsr-audit-prep is a Compliance Review skill for FDA medical-device QSR audit readiness. Use it to pressure-test complaint files, MDR decisions, CAPA links, process validation, Form 483 responses, and QMSR transition evidence with six inspection-style questions.

compliance-readiness is a prompt-driven compliance review skill for pressure-testing framework scope, evidence reuse, audit timing, ownership, and readiness gaps before new-framework adoption or certification planning.

compliance-os is a multi-framework compliance orchestration skill for Compliance Review. Use it to assess framework applicability, map control overlap, prioritize reusable evidence, and simulate mock internal audits with JSON templates and Python helper scripts.

ai-act-readiness is a Compliance Review skill for EU AI Act intake, pre-deployment checks, conformity readiness, and annual refreshes. It uses /cs:ai-act-readiness <system> to walk through six article-linked questions on prohibited practices, high-risk status, roles, GPAI triggers, and phase-in dates.

aims-audit is a Claude skill for ISO/IEC 42001 AIMS compliance review, using /cs:aims-audit <scope> and six forcing questions to test scope, policy, risk refresh, and audit evidence before certification, internal audit, or AI-system onboarding.

ciso-advisor helps AI agents and security leaders turn risk, compliance, incidents, and board reporting into CISO-level decisions. Includes guidance for Security Strategy, SOC 2/ISO 27001/HIPAA/GDPR roadmaps, executive incident response, plus Python tools for risk quantification and compliance tracking.