Vertical de compliance do Onion: documentacao de conformidade como spec-as-code (ISO 27001/22301, SOC2, PMBOK) via agentes especialistas + build-compliance-docs. Auto-adapta ao compliance-context do consumidor (SDAAL).
Plugin onion-compliance from marketplace onion-plugins in marciocar/onion-evolve. Commands read from the repo's manifest — today.
onion-compliance-contextContrato de SSOT mínimo e resolver de contexto da vertical de COMPLIANCE do Onion. Use ao rodar comandos de compliance (build-compliance-docs) ou os especialistas ISO 27001/22301, SOC2, PMBOK, para localizar o contexto de CONTROLES do projeto — mesmo quando o repo NÃO segue o layout Onion padrão (se
/onion-compliance:build-compliance-docsGerar arquitetura de compliance na pasta de contexto declarada (default `docs/compliance-context/`).
iso-22301-specialistEspecialista em ISO 22301:2019 (BCMS) para documentação de continuidade de negócios. Use para disaster recovery, crisis management, BCP/DRP e RTOs/RPOs. - Read - Write - Edit - Grep - Glob - WebSearch - TodoWrite - iso-22301 - business-continuity - disaster-recovery - crisis-management - resilience-
iso-27001-specialistEspecialista em ISO/IEC 27001:2022 (ISMS) para documentação completa de SGSI. Use para política de segurança, risk assessment, controle de acesso e incident response. - Read - Write - Edit - Grep - Glob - WebSearch - TodoWrite - iso-27001 - isms - information-security - risk-assessment - access-cont
pmbok-specialistEspecialista em PMBOK Guide 7th Edition para documentação de governança de projetos. Use para change management, quality management, stakeholder e risk management. - Read - Write - Edit - Grep - Glob - WebSearch - TodoWrite - pmbok - project-management - change-management - quality-management - risk
security-information-masterOrquestrador de compliance que detecta frameworks (ISO 27001, ISO 22301, PMBOK, SOC2) e delega. Use para análise de requisitos e coordenação de especialistas de compliance. - Read - Write - Grep - Glob - WebSearch - TodoWrite - compliance-orchestration - framework-detection - due-diligence - risk-ma
soc2-specialistEspecialista em SOC2 Type II (AICPA Trust Services Criteria) para documentação de controles. Use para segurança, disponibilidade, confidencialidade e coleta de evidências. - Read - Write - Edit - Grep - Glob - WebSearch - TodoWrite - soc2 - trust-services-criteria - security-controls - availability
Vertical de produto do Onion: descoberta a backlog (collect→refine→spec→feature), decomposição de tasks agnóstica ao provider, story points, extração de reuniões, apresentações e documentação de contexto (business/technical context, C4 + Mermaid, engenharia reversa, docs-health).
1 skill · 31 commands · 17 agents
Vertical de engenharia do Onion: fluxo faseado plan→start→work→pre-pr→pr→pr-update (GitFlow + sessões persistentes), gates pré-PR, especialistas de código (Node, React, Postgres, NX, Docker, segurança) e testes (unit/integration/e2e, estratégia de teste, QA story points).
1 skill · 21 commands · 19 agents
Núcleo operacional do Sistema Onion: o orquestrador mestre (skill onion), runtime de knowledge graph (kg + radar soberano + kg-freshness), sessões e diário, orquestração de subagentes, condução (wizard/onboarding/retro), validação de meta-specs e os adapters SDAAL de task-manager e forge.
8 skills · 26 commands · 2 agents · hooks
Meta-fábrica do Sistema Onion: cria comandos, agentes, skills, abstrações SDAAL e knowledge bases pelos templates do framework, audita o próprio framework (evolve, dissect) e absorve skills de terceiros com proveniência.
9 commands · 3 agents
Vertical de design do Onion: identidade visual como spec-as-code (tokens W3C/DTCG), gate WCAG e materializacao via design-sink. Auto-adapta ao design-context do consumidor.
1 skill · 4 commands · 3 agents
lab, sem mod
hooks
ADR lifecycle management — create, index, supersede, and link Architecture Decision Records to code
5 skills · 1 command · 1 agent
Install the "AAS Privacy & Compliance Engineering" workflow plugin from Agentic Awesome Skills.
6 skills
Automate API security directly in Claude Code with 42Crunch - automatically audit OpenAPI specs, detect vulnerabilities aligned with OWASP API Security risks (including BOLA/BFLA), and apply AI-powered fixes. Designed for AI-assisted development workflows, it provides continuous guardrails through an audit->scan->remediate->validate loop, ensuring APIs meet enterprise security standards before deployment.
5 skills
SAST analysis, dependency vulnerability scanning, OWASP Top 10 compliance, container security scanning, and automated security hardening
5 skills · 3 commands · 2 agents
Twilio Skills provide procedural knowledge for AI coding agents — which APIs to use, in what order, and what to avoid. Covers SMS, Voice, WhatsApp, Verify, SendGrid, Compliance, and 30+ products.
57 skills · 1 MCP server
14 regulatory affairs & quality management skills for HealthTech/MedTech: ISO 13485 QMS, MDR 2017/745, FDA 510(k)/PMA, GDPR/DSGVO, ISO 27001 ISMS, CAPA management, risk management, clinical evaluation, SOC 2 compliance.
21 skills
This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.