Claude Code and Codex plugins their authors filed under "compliance". All categories.
Compliance OS — meta-orchestrator for multi-framework compliance programs spanning 9 frameworks (ISO 27001, ISO 13485, ISO 42001, ISO 14971, EU AI Act, MDR 745, GDPR, SOC 2, FDA QSR). Framework selector, cross-framework control mapper, audit simulator, and consolidated evidence-pool generator (stdlib Python), plus 3 cs-* compliance agents and 3 /cs:* readiness commands.
9 skills · 8 agents
Compliance OS — meta-orchestrator for multi-framework compliance programs spanning 9 frameworks (ISO 27001, ISO 13485, ISO 42001, ISO 14971, EU AI Act, MDR 745, GDPR, SOC 2, FDA QSR). Framework selector, cross-framework control mapper, audit simulator, and consolidated evidence-pool generator (stdlib Python), plus 3 cs-* compliance agents and 3 /cs:* readiness commands.
9 skills · 8 agents
14 regulatory affairs & quality management skills for HealthTech/MedTech: ISO 13485 QMS, MDR 2017/745, FDA 510(k)/PMA, GDPR/DSGVO, ISO 27001 ISMS, CAPA management, risk management, clinical evaluation, SOC 2 compliance.
16 skills
14 regulatory affairs & quality management skills for HealthTech/MedTech: ISO 13485 QMS, MDR 2017/745, FDA 510(k)/PMA, GDPR/DSGVO, ISO 27001 ISMS, CAPA management, risk management, clinical evaluation, SOC 2 compliance.
16 skills
14 regulatory affairs & quality management skills for HealthTech/MedTech: ISO 13485 QMS, MDR 2017/745, FDA 510(k)/PMA, GDPR/DSGVO, ISO 27001 ISMS, CAPA management, risk management, clinical evaluation, SOC 2 compliance.
16 skills
14 regulatory affairs & quality management skills for HealthTech/MedTech: ISO 13485 QMS, MDR 2017/745, FDA 510(k)/PMA, GDPR/DSGVO, ISO 27001 ISMS, CAPA management, risk management, clinical evaluation, SOC 2 compliance.
16 skills
Scans a Kiteworks folder for sensitive content and sharing exposure under CIS Controls v8's Data Protection control, and saves a report. Most of CIS Controls is outside what this can check; it says so.
11 skills · 1 agent · hooks
Scans a Kiteworks folder for CUI-marked content and sharing exposure under CMMC 2.0, and saves a report. SSP authorship and SPRS scoring are outside what this can check; it says so.
11 skills · 1 agent · hooks
Checks a Kiteworks folder for sharing exposure of ICT-related documentation under DORA, and saves a report. Most of DORA is outside what this can check; it says so.
11 skills · 1 agent · hooks
12 regulatory affairs & quality management skills for HealthTech/MedTech: ISO 13485, MDR, FDA, GDPR, ISO 27001 compliance
12 skills
12 regulatory affairs & quality management skills for HealthTech/MedTech: ISO 13485, MDR, FDA, GDPR, ISO 27001 compliance
12 skills
12 regulatory affairs & quality management skills for HealthTech/MedTech: ISO 13485, MDR, FDA, GDPR, ISO 27001 compliance
12 skills
Compliance engine with pluggable jurisdiction packs: global baseline, EU/Italy, North America, UK/APAC/LATAM, plus OSS licensing and IP.
4 skills · 5 agents
Understand Thoropass audits, track your tasks and readiness, triage evidence requests, answer policy questions, match policies to evidence, and investigate monitors.
8 skills · 1 MCP server
KRA eTIMS (Electronic Tax Invoice Management System) integration for Kenya tax compliance. OSCU/VSCU integration, invoice submission, stock management, item classification.
3 skills · 1 command · 1 agent
AI agent governance enforcement. Identifies agents without a SAISA (Standard AI Services Agreement) and maps deployment blockers to exact.works requirements. Every AI agent needs a service agreement.
1 skill · 1 command · 1 agent
Marks AI-generated code with SPDX/REUSE headers and snippet markers (waLBerla AI policy).
1 skill · hooks
EU compliance methodology + 32 strategic-subset templates for AI Act, ISO 42001, NIS2, DORA, ISO 27001, ISO 22301, ISO 27701, CRA
1 skill
Writes and audits privacy policies, terms of service, and cookie policies for products processing personal data in Ghana, grounded in a scan of the target codebase and Ghana's Data Protection Act, 2012 (Act 843).
1 skill
General-purpose GxP document and record review skill. Produces structured Critical/Major/Minor/Observation findings against FDA, EU, ICH, and Montai SOPs, with a Word review report deliverable.
1 skill
Generate, lint, and retrofit GxP controlled documents as native .docx. A python-docx builder owns the repeating page header, live page-number fields, clause numbering and table styling so documents cannot drift, and a companion linter proves conformance against the bundled style guide.
1 skill
Healthcare & Life Sciences tools: PHI compliance scanning grounded in HIPAA Safe Harbor, NIST SP 800-188, and patterns from Philter/Presidio. Detects SSNs, MRNs, patient names, NPI/DEA numbers, HL7/FHIR data in codebases before customer demos.
1 skill
EU AI Act (Regulation (EU) 2024/1689) operational compliance specialist: AI system risk classifier (Articles 5/6/50 + Annex III), conformity assessment planner (Article 43 + Annex IV checklist), and obligation tracker (provider/deployer/importer/distributor + GPAI Articles 51-55). Article-level references and cross-framework mapping to ISO 42001, NIST AI RMF, GDPR. Stdlib-only.
1 skill
EU AI Act (Regulation (EU) 2024/1689) operational compliance specialist: AI system risk classifier (Articles 5/6/50 + Annex III), conformity assessment planner (Article 43 + Annex IV checklist), and obligation tracker (provider/deployer/importer/distributor + GPAI Articles 51-55). Article-level references and cross-framework mapping to ISO 42001, NIST AI RMF, GDPR. Stdlib-only.
1 skill
Checks a product, business or codebase against Kenya's Data Protection Act 2019 and the ODPC regulations: whether to register, and what to fix.
1 skill
Production-grade Saudi compliance, security, and architecture skills for agent-assisted engineering (ZATCA Phase 2, PDPL, Nafath/Yakeen, mada/STC Pay, auth isolation, secrets baseline, testability, CI hygiene).