Compliance plugins

14 regulatory affairs & quality management skills for HealthTech/MedTech: ISO 13485 QMS, MDR 2017/745, FDA 510(k)/PMA, GDPR/DSGVO, ISO 27001 ISMS, CAPA management, risk management, clinical evaluation, SOC 2 compliance.

21 skills

Compliance OS — meta-orchestrator for multi-framework compliance programs spanning 9 frameworks (ISO 27001, ISO 13485, ISO 42001, ISO 14971, EU AI Act, MDR 745, GDPR, SOC 2, FDA QSR). Framework selector, cross-framework control mapper, audit simulator, and consolidated evidence-pool generator (stdlib Python), plus 3 cs-* compliance agents and 3 /cs-* readiness commands.

9 skills · 8 agents

Prove your user access reviews before the auditor tests them. Three deterministic stdlib scripts: a roster diff that joins the HR roster to account exports and blocks on leavers still enabled or used after exit, privileged orphans and ownerless privileged service accounts; a campaign checker that blocks on population gaps, undecided lines, self-review and revokes not removed inside your window, and flags rubber-stamping; and a control mapper that turns findings into per-control status for SOC 2, ISO 27001, NIST 800-53, PCI DSS, HIPAA and SOX IPE. Ships cs-access-reviewer agent, /cs-access-review and /cs-access-diff commands, 3 cited references and an access review sign-off template.

1 skill · 2 commands · 1 agent

Run every App Store and Google Play compliance check in one command: code patterns, privacy manifests, Android manifests and Gradle, IPA/APK/AAB binaries, metadata. Catches rejections before you submit.

3 skills

27 ra qm team skills: ISO 13485, MDR, FDA, SOC 2, GDPR, EU AI Act, NIS2, DORA, NIST CSF, PCI-DSS, CCPA, ISO 42001 plus audit-prep playbooks

27 skills

Expert ISO 27001 gap analysis, policy writing, Annex A control guidance, SoA generation, and risk register creation for both 2013 and 2022 versions.

1 skill

Expert SOC 2 compliance advisor covering all Trust Services Criteria — gap analysis, policy drafting, control documentation, audit evidence, and vendor risk.

1 skill

End-to-end FedRAMP authorization guidance — readiness assessments, SSP narratives, POA&M management, NIST 800-53 Rev 5 control mapping, and ConMon support.

1 skill

Analyzes how multiple regulations interact for a specific product, service, or business model. Identifies where obligations overlap, reinforce, complement, duplicate, or conflict; builds a priority matrix; produces an integrated compliance timeline; and estimates the total compliance burden. Use when (1) scoping a new product or service against the full regulatory landscape before launch, (2) conducting M&A due diligence on a target's multi-regulation exposure, (3) building a strategic compliance roadmap where single-regulation analyses miss the interactions, (4) advising on complex situations where regulations touch the same conduct from different angles, or (5) estimating budget and resourcing for multi-regulation compliance. Primary coverage of EU digital regulation (GDPR, Data Act, AI Act, CRA, NIS2, DORA, DMA, DSA, ePrivacy) and national implementations; the framework extends to any jurisdiction where overlapping regulatory regimes apply to the same activity.

200 skills

Assess and classify legal risks using a severity-by-likelihood framework with escalation criteria. Use when evaluating contract risk, assessing deal exposure, classifying issues by severity, or determining whether a matter needs senior counsel or outside legal review.

200 skills

Assess and classify legal risks using a severity-by-likelihood framework with escalation criteria. Use when evaluating contract risk, assessing deal exposure, classifying issues by severity, or determining whether a matter needs senior counsel or outside legal review.

200 skills

Review user journeys, public content, and codebases for potentially relevant EU AI Act provisions, with exact official citations, evidence gaps, application dates, and plain-language next actions. Issue-spotting only — never a legal or compliance verdict.

1 skill

Evaluates code against Apple's App Store Review Guidelines for iOS, macOS, tvOS, watchOS, and visionOS apps

2 skills

Complete collection of 282+ privacy and data protection skills covering GDPR, CCPA, HIPAA, LGPD, PIPL, and 15+ regulations

200 skills

18 GDPR compliance skills: audit, gap analysis, accountability, DPO, certification, DPA drafting, supervisory authority cooperation

18 skills

18 DPIA and PIA skills: GDPR Art. 35, risk scoring, stakeholder consultation, threshold screening, mitigation planning

18 skills

Deterministic ALCOA+ data-integrity linter: checks Attributable / Contemporaneous / Complete / Accurate / Consistent in code and surfaces the human-judgment slice as a 【待補】 checklist it never auto-concludes. DEGRADED lints any CSV/JSON record against a declared contract; FULL snaps onto an agentic-sop-kit run dir. The report is a DRAFT — the human owns the verdict. Pure stdlib.

1 skill · hooks

12 regulatory affairs & quality management skills for HealthTech/MedTech: ISO 13485 QMS, MDR 2017/745, FDA 510(k)/PMA, GDPR/DSGVO, ISO 27001 ISMS, CAPA management, risk management, clinical evaluation.

13 skills

Multi-platform plugin for systematic German/EU legal audits (DSGVO, TDDDG, UWG, AI Act, etc.). Scans codebases, live URLs, and individual legal documents. Produces severity-classified findings + clean corrected versions. NOT legal advice.

4 skills · hooks

Draft incident write-ups, job hazard analyses, toolbox talks, inspection checklists, and corrective-action logs

2 skills · 5 commands

Audit AI systems, generate compliance docs, track regulatory change, and evaluate autonomous agents

2 skills · 4 commands

Extract ESG data, score risk, draft disclosures, and benchmark sustainability performance

2 skills · 4 commands

Deterministic QUBO/Ising policy-optimization and Z3/SMT-style formal constraint verification, bundled locally from the tdealer01-crypto/Compliance-ising-z3-Deterministic- engine. Includes a z3-compliance-review skill, a compliance-agent subagent, and reference build/test scripts. Constraint checks are Z3/SMT-style in native Kotlin (no external Z3 process).

2 skills · 1 agent

EU AI Act compliance toolkit for Claude Code — local stdio MCP server + 6 slash commands. Wraps the `specter` Python package (install with `pip install 'specter[plugin]>=0.1.2'`).

6 commands · 1 MCP server

Navigate email privacy laws and stay compliant worldwide.

Compliance and research workflows over official business registries - insolvency and credit-risk, KYC/AML and KYB with Central and Eastern European depth, property, compliance audits and B2B lead-gen. Includes the getregdata MCP server: one tool per registry, plus a one-call Poland KYB verdict.

47 skills · 1 MCP server

Enhanced due-diligence screening from official sources - sanctions and PEP lists, US federal debarment, US litigation, offshore-leaks red flags, EU VAT/EORI validation and EU lobbying disclosure. All free public APIs.

47 skills · 1 MCP server

Warns when a dependency with a copyleft license (GPL, AGPL) lands in a permissively licensed project.

Flags log statements that print emails, passwords, tokens or other personal data.

/data-map lists where your code collects, stores and sends personal data — a head start for GDPR.