Privacy

hipaa-compliance is the HIPAA-specific entrypoint for healthcare privacy and security work. Use the hipaa-compliance skill when a task is explicitly about PHI, covered entities, BAAs, breach posture, or whether a workflow creates HIPAA exposure. It is a thin overlay for fast compliance triage and guidance.

healthcare-phi-compliance helps review healthcare apps for PHI/PII risk across data models, APIs, logs, and access paths. Use it to check data classification, access control, encryption, audit trails, and common leak vectors for HIPAA, DISHA, GDPR, and related security audit needs.

foundation-models-on-device helps you build Apple FoundationModels features on iOS 26+ with on-device text generation, guided output with @Generable, tool calling, snapshot streaming, and availability checks for privacy-first apps.

gdpr-dsgvo-expert helps agents run GDPR/DSGVO Compliance Review with code scans, DPIA drafting, audit guidance, BDSG references, and DSAR deadline tracking. Use it to surface privacy risks and prepare evidence for DPO or legal review.

soc2-audit-prep is a SOC 2 Type II compliance review skill that runs six observation-period forcing questions via /cs:soc2-audit-prep <scope>. Use it to pressure-test scope, TSC choices, skipped control cycles, evidence gaps, incidents, and audit readiness before fieldwork.

gdpr-audit-prep helps teams pressure-test GDPR readiness with six Article-cited DPO questions for RoPA, lawful basis, DPIA, transfers, breach, retention, and evidence gaps before audits or due diligence.

compliance-os is a multi-framework compliance orchestration skill for Compliance Review. Use it to assess framework applicability, map control overlap, prioritize reusable evidence, and simulate mock internal audits with JSON templates and Python helper scripts.

chief-data-officer-advisor is a strategic CDO skill for startup data decisions: AI training data rights, warehouse vs lakehouse vs mesh strategy, customer-data asset valuation, M&A readiness, and data team hiring. Includes references and Python tools for decision support, not tactical data engineering.

ciso-review is a CISO-style Security Audit prompt for plans involving customer data, compliance, vendors, trust boundaries, or production access. It uses six forcing questions—threat model, blast radius, detection, response, regulatory exposure, and ship/no-ship risk—to turn a plan into blockers, mitigations, and launch guidance.

cdo-review is a Chief Data Officer review skill for pressure-testing data strategy plans, AI training data rights, architecture choices, data productization, M&A diligence, and data-team hiring before commitments.

The privacy-policy skill helps draft a first-pass privacy policy for a product or service, with clear data-collection details, jurisdiction scope, and legal review flags. Use it when launching a site, app, or SaaS, updating documentation, or preparing a privacy-policy for Legal review.

multi-search-engine is a web research skill with 17 search engines, advanced operators, time filters, privacy-focused options, and WolframAlpha queries. It helps agents build and run better search URLs without API keys.

create-parents helps turn chat logs, memories, photos, and voice notes into a reusable parent persona skill for Claude Code, with guided intake, WeChat parsing, memory and persona generation, and updateable files under ./parents/{slug}/.

reunion is a local-first skill for building memorial chat agents from memories, chat logs, diaries, photos, and oral recollections, with Memory and Persona analysis, CLI use, and MCP server support for Agent Orchestration.