39 KiB
External AI agent skills — notary
Proven, publicly available AI agent skills mapped to this occupation. Nothing is copied from the sources: every entry is a name, a one-line summary and a link to the upstream skill package. Each section names its source repository, commit, license and retrieval date.
Tiers: core = the skill directly exercises a top market hard
skill, tool or method (from gated job-ad evidence) or an essential
ESCO competence of this occupation; adjacent =
plausibly useful, secondary. Entries are capped at 12 per source
and 80 in total per occupation (core first,
strongest matches survive); everything beyond the caps is excluded
and logged in the pipeline audit trail, not in this package.
Matched deterministically (ISCO group + title/competence keywords,
tiered against market evidence + ESCO essentials) by
pipeline/p5_enrich_ai_skills.py on 2026-07-14.
Source: anthropics/skills
- Repository: https://github.com/anthropics/skills (commit
f6656c1, retrieved 2026-07-14) - License: Apache-2.0; the document skills (docx/pdf/pptx/xlsx) are source-available — see the LICENSE.txt in the upstream skill folder
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
docx |
adjacent | Use this skill whenever the user wants to create, read, edit, or manipulate Word documents (.docx files) or Word templates (.dotx files). Triggers include: any mention of 'Word doc', 'word document', '.docx', '.dotx', or requests to … | source |
pdf |
adjacent | Use this skill whenever the user wants to do anything with PDF files. This includes reading or extracting text/tables from PDFs, combining or merging multiple PDFs into one, splitting PDFs apart, rotating pages, adding watermarks, creating … | source |
Source: wshobson/agents
- Repository: https://github.com/wshobson/agents (commit
6fd3247, retrieved 2026-07-14) - License: MIT (c) Seth Hobson
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
gdpr-data-handling |
core | Implement GDPR-compliant data handling with consent management, data subject rights, and privacy by design. Use when building systems that process EU personal data, implementing privacy controls, or conducting GDPR compliance reviews. | source |
employment-contract-templates |
adjacent | Create employment contracts, offer letters, and HR policy documents following legal best practices. Use when drafting employment agreements, creating HR policies, or standardizing employment documentation. | source |
Source: a5c-ai/babysitter
- Repository: https://github.com/a5c-ai/babysitter (commit
44a5d58b, retrieved 2026-07-14) - License: MIT
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
license-compliance-checker |
core | Automated license compliance verification for dependencies to ensure legal compliance during migration | source |
interview-questions |
core | Generate competency-based and behavioral interview questions with legal compliance validation | source |
iso-nanotechnology-compliance-checker |
core | Regulatory compliance skill for ISO nanotechnology standards verification and documentation | source |
iso-standards-compliance-checker |
core | Medical device standards compliance verification skill for ISO 13485, ISO 14971, IEC 62304, IEC 60601, and related standards | source |
certora-prover |
core | Formal verification using Certora Prover with CVL specification language. Supports invariant rules, parametric verification, ghost variables, and counterexample analysis for mathematical proof of contract correctness. | source |
compliance-checker |
core | Check compliance with SOC 2, GDPR, HIPAA, and PCI-DSS standards | source |
contract-test-generator |
core | Generate contract tests for API migrations with consumer-driven contracts and provider verification | source |
evm-analysis |
core | Deep EVM bytecode analysis and decompilation capabilities for smart contract security, gas optimization, and reverse engineering. Provides tools for analyzing opcodes, storage layouts, proxy patterns, and bytecode verification. | source |
pact-contract-testing |
core | Consumer-driven contract testing with Pact framework. Generate consumer contracts, configure Pact Broker publishing, execute provider verification, detect breaking changes, and integrate with CI/CD pipelines. | source |
accessibility-compliance-auditing |
core | Evaluate learning materials and technology for WCAG, Section 508, and accessibility compliance with remediation recommendations | source |
accreditation-tracer-simulation |
core | Simulate Joint Commission tracer methodology to assess compliance with accreditation standards across patient care processes and support systems | source |
ga4gh-standards-validator |
core | GA4GH standards compliance skill for data sharing and interoperability | source |
Source: ahacker-1/cre-agent-skills
- Repository: https://github.com/ahacker-1/cre-agent-skills (commit
618734e, retrieved 2026-07-14) - License: Apache-2.0
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
cre-legal |
core | CRE Legal review suite — 6 specialist skills for PSA review, title & survey analysis, estoppel tracking, loan document review, insurance coordination, and transfer document preparation for multifamily acquisitions. | source |
Source: alirezarezvani/claude-skills
- Repository: https://github.com/alirezarezvani/claude-skills (commit
0241f43, retrieved 2026-07-14) - License: MIT
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
compliance-readiness |
core | /cs:compliance-readiness — Multi-framework compliance officer 6-question forcing interrogation of any compliance program. Use before starting a new framework, planning the annual audit calendar, or preparing for certification … | source |
ciso-advisor |
core | Security leadership for growth-stage companies. Risk quantification in dollars, compliance roadmap (SOC 2/ISO 27001/HIPAA/GDPR), security architecture strategy, incident response leadership, and board-level security reporting. Use when … | source |
iso42001-specialist |
core | ISO/IEC 42001:2023 AI Management System (AIMS) specialist for compliance teams running internal audits. Three decisions: (1) Where are the gaps against Clauses 4-10 and what do we close first? (2) What goes in the AI risk register and … | source |
Source: avelikiy/great_cto
- Repository: https://github.com/avelikiy/great_cto (commit
4fe1e39, retrieved 2026-07-14) - License: MIT
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
well-architected |
core | 6-pillar architecture review framework. Adapted from AWS Well-Architected for use by great_cto's architect agent on every non-nano ARCH document. Forces explicit answers across operational excellence, security, reliability, performance, … | source |
Source: basicmachines-co/basic-memory
- Repository: https://github.com/basicmachines-co/basic-memory (commit
53da71c, retrieved 2026-07-14) - License: custom (see upstream LICENSE)
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
bm-checkpoint |
core | Save a deliberate Codex work checkpoint to Basic Memory with changed files, verification, decisions, blockers, and the next action. | source |
Source: brycewang-stanford/Auto-Empirical-Research-Skills
- Repository: https://github.com/brycewang-stanford/Auto-Empirical-Research-Skills (commit
85bf545, retrieved 2026-07-14) - License: CC-BY-4.0
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
law-skills |
core | 9 legal research skills. Trigger: legal research, case law analysis, regulatory compliance. Design: legal databases, citation networks, and judicial analytics tools. | source |
legal-research-guide |
core | Legal research methods, case law analysis, and compliance tools | source |
submit |
core | Final submission verification gate for the sewage-house-prices paper. Runs full paper excellence review, replication audit, enforces score gates, and generates cover letter draft and submission checklist. This skill should be used when … | source |
Source: code-yeongyu/oh-my-openagent
- Repository: https://github.com/code-yeongyu/oh-my-openagent (commit
b19f652, retrieved 2026-07-14) - License: custom (see upstream LICENSE)
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
work-with-pr |
core | Full PR lifecycle in a fresh task-owned git worktree: implement via the ulw-loop skill with mandatory evidence-bound manual QA → reviewer-readable English PR → verification loop (CI + review-work reviewers + Cubic, where Cubic is skipped … | source |
Source: davila7/claude-code-templates
- Repository: https://github.com/davila7/claude-code-templates (commit
fa79251, retrieved 2026-07-14) - License: MIT
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
docx-official |
core | Use this skill whenever the user wants to create, read, edit, or manipulate Word documents (.docx files). Triggers include: any mention of 'Word doc', 'word document', '.docx', or requests to produce professional documents with formatting … | source |
gdpr-dsgvo-expert |
core | Senior GDPR/DSGVO expert and internal/external auditor for data protection compliance. Provides EU GDPR and German DSGVO expertise, privacy impact assessments, data protection auditing, and compliance verification. Use for GDPR compliance … | source |
Accessibility Auditor |
core | Web accessibility specialist for WCAG compliance, ARIA implementation, and inclusive design. Use when auditing websites for accessibility issues, implementing WCAG 2.1 AA/AAA standards, testing with screen readers, or ensuring ADA … | source |
Data Privacy Compliance |
core | Data privacy and regulatory compliance specialist for GDPR, CCPA, HIPAA, and international data protection laws. Use when implementing privacy controls, conducting data protection impact assessments, ensuring regulatory compliance, or … | source |
Source: foryourhealth111-pixel/Vibe-Skills
- Repository: https://github.com/foryourhealth111-pixel/Vibe-Skills (commit
34429a8, retrieved 2026-07-14) - License: Apache-2.0
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
peer-review |
core | Structured manuscript/grant review with checklist-based evaluation. Use when writing formal peer reviews with specific criteria methodology assessment, statistical validity, reporting standards compliance (CONSORT/STROBE), and constructive … | source |
Source: giuseppe-trisciuoglio/developer-kit
- Repository: https://github.com/giuseppe-trisciuoglio/developer-kit (commit
306f428, retrieved 2026-07-14) - License: MIT
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
aws-cloudformation-vpc |
core | Provides AWS CloudFormation patterns for VPC foundations, including subnets, route tables, internet and NAT gateways, endpoints, and reusable outputs. Use when creating a new network baseline, segmenting public and private workloads, or … | source |
Source: glittercowboy/taches-cc-resources
- Repository: https://github.com/glittercowboy/taches-cc-resources (commit
1757615, retrieved 2026-07-14) - License: MIT
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
debug-like-expert |
core | Deep analysis debugging mode for complex issues. Activates methodical investigation protocol with evidence gathering, hypothesis testing, and rigorous verification. Use when standard troubleshooting fails or when issues require systematic … | source |
Source: gotalab/cc-sdd
- Repository: https://github.com/gotalab/cc-sdd (commit
29aee95, retrieved 2026-07-14) - License: MIT
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
kiro-review |
core | Review a task implementation against approved specs, task boundaries, and verification evidence. Use after an implementer finishes a task, after remediation, or before accepting a task as complete. | source |
Source: heshengtao/super-agent-party
- Repository: https://github.com/heshengtao/super-agent-party (commit
181588d, retrieved 2026-07-14) - License: custom (see upstream LICENSE)
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
officeCLI |
core | Create, analyze, proofread, and modify Office documents (.docx, .xlsx, .pptx) using the officecli CLI tool. Use when the user wants to create, inspect, check formatting, find issues, add charts, or modify Office documents. | source |
Source: jeremylongshore/claude-code-plugins-plus-skills
- Repository: https://github.com/jeremylongshore/claude-code-plugins-plus-skills (commit
e112938a, retrieved 2026-07-14) - License: MIT
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
find-law-firm |
core | Use whenever the user wants to find, shortlist, vet, or enrich US B2B law firms — corporate, IP/patent, M&A and securities, employment, commercial litigation, regulatory/compliance, data privacy/cyber, real estate, and tax. Triggers on … | source |
adobe-data-handling |
core | Implement data handling for Adobe APIs including PII redaction in logs, Firefly content policy compliance, PDF document data classification, and GDPR/CCPA data subject access requests via Adobe Privacy Service. Trigger with phrases like … | source |
flexport-data-handling |
core | Implement data handling for Flexport supply chain data including PII redaction, shipment data retention, GDPR compliance, and secure document management. Trigger: "flexport data handling", "flexport PII", "flexport GDPR", "flexport data … | source |
contract-review |
core | Orchestrates a comprehensive multi-agent contract review that analyzes risk, plain-English translation, missing protections, and compliance in parallel. Use when a user shares a contract and wants a full review, safety score, or executive … | source |
plugin-auditor |
core | Audit automatically audits AI assistant code plugins for security vulnerabilities, best practices, AI assistant.md compliance, and quality standards when user mentions audit plugin, security review, or best practices check. specific to AI … | source |
cursor-compliance-audit |
core | Compliance and security auditing for Cursor IDE usage: SOC 2, GDPR, HIPAA assessment, evidence collection, and remediation. Triggers on "cursor compliance", "cursor audit", "cursor security review", "cursor soc2", "cursor gdpr", "cursor … | source |
customerio-security-basics |
core | Apply Customer.io security best practices. Use when implementing secure credential storage, PII handling, webhook signature verification, or GDPR/CCPA compliance. Trigger: "customer.io security", "customer.io pii", "secure customer.io", … | source |
openrouter-compliance-review |
core | Review OpenRouter integration for regulatory compliance (SOC2, GDPR, HIPAA). Use when preparing for audits, evaluating data handling, or documenting compliance posture. Triggers: ''openrouter compliance'', ''openrouter gdpr'', ''openrouter … | source |
shopify-data-handling |
core | Handle Shopify customer PII, implement GDPR/CCPA compliance, and manage data retention with Shopify''s mandatory privacy webhooks. Use when building apps that store customer data, preparing for App Store review, or implementing deletion … | source |
validating-api-responses |
core | Validate API responses against schemas to ensure contract compliance and data integrity. Use when ensuring API response correctness. Trigger with phrases like "validate responses", "check API responses", or "verify response format". | source |
alchemy-ci-integration |
core | Configure CI/CD pipeline for Alchemy-powered Web3 applications. Use when setting up automated testing with Hardhat forks, smart contract verification, or testnet deployment pipelines. Trigger: "alchemy CI", "alchemy GitHub Actions", "web3 … | source |
gdpr-compliance-scanner |
core | Scan gdpr compliance scanner operations. Auto-activating skill for Security Advanced. Triggers on: gdpr compliance scanner, gdpr compliance scanner Part of the Security Advanced skill category. Use when working with gdpr compliance scanner … | source |
Source: K-Dense-AI/claude-scientific-skills
- Repository: https://github.com/K-Dense-AI/claude-scientific-skills (commit
4d97e29, retrieved 2026-07-14) - License: MIT
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
peer-review |
core | Structured manuscript/grant review with checklist-based evaluation. Use when writing formal peer reviews with specific criteria methodology assessment, statistical validity, reporting standards compliance (CONSORT/STROBE), and constructive … | source |
Source: K-Dense-AI/scientific-agent-skills
- Repository: https://github.com/K-Dense-AI/scientific-agent-skills (commit
4d97e29, retrieved 2026-07-14) - License: MIT
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
peer-review |
core | Structured manuscript/grant review with checklist-based evaluation. Use when writing formal peer reviews with specific criteria methodology assessment, statistical validity, reporting standards compliance (CONSORT/STROBE), and constructive … | source |
Source: kazukinagata/shinkoku
- Repository: https://github.com/kazukinagata/shinkoku (commit
e610b30, retrieved 2026-07-14) - License: MIT
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
tax-ebookkeeping-context |
core | Background context for the Electronic Bookkeeping Act (電子帳簿保存法) in the shinkoku tax filing plugin. Contains requirements for electronic bookkeeping, scanner storage, mandatory electronic transaction data storage, and shinkoku's compliance … | source |
Source: ljagiello/ctf-skills
- Repository: https://github.com/ljagiello/ctf-skills (commit
d19f35f, retrieved 2026-07-14) - License: MIT
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
ctf-writeup |
core | Generates a single standardized submission-style CTF writeup for competition handoff and organizer review. Use after solving a CTF challenge to document the solution steps, tools used, and lessons learned in a structured format. | source |
Source: mohitagw15856/pm-claude-skills
- Repository: https://github.com/mohitagw15856/pm-claude-skills (commit
876fa30, retrieved 2026-07-14) - License: MIT
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
docx-tracked-changes |
core | Produce properly-formatted tracked changes for a Word document. Use when asked to redline a document, suggest edits to a contract or document, create tracked changes for review, or mark up a document with proposed revisions. Produces a … | source |
word-document |
core | Build a real, formatted Word (.docx) document — headings, styles, tables, TOC-ready. Use when asked to produce a Word doc, a .docx, a formatted report/contract/proposal/letter as an actual file (not markdown). Produces an actual .docx via … | source |
briefing-note |
core | Write a one-page briefing note that gets a busy principal up to speed fast. Use when asked to brief a minister/executive/official, prepare a briefing note or read-ahead, or summarize an issue for a decision or meeting. Produces a tight, … | source |
compliance-checklist |
core | Generate a prioritised compliance checklist for GDPR, SOC 2, ISO 27001, FCA, HIPAA, or other frameworks with a gap analysis. Use when asked for a compliance checklist, gap analysis, readiness assessment, or audit preparation for any … | source |
gdpr-compliance |
core | Assess GDPR compliance and build the core records (ROPA, lawful basis, DSAR, DPIA triggers). Use when asked to get GDPR-compliant, build a Record of Processing Activities, decide a lawful basis, handle data-subject requests, or check … | source |
Source: mukul975/Anthropic-Cybersecurity-Skills
- Repository: https://github.com/mukul975/Anthropic-Cybersecurity-Skills (commit
673da1f, retrieved 2026-07-14) - License: Apache-2.0
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
analyzing-macro-malware-in-office-documents |
core | Analyzes malicious VBA macros embedded in Microsoft Office documents (Word, Excel, PowerPoint) to identify download cradles, payload execution, persistence mechanisms, and anti-analysis techniques. Uses olevba, oledump, and VBA … | source |
achieving-cmmc-level-2-compliance |
core | Prepare a defense-contractor environment for CMMC Level 2 certification: scope CUI and FCI, implement the 110 NIST SP 800-171 Rev 2 security requirements across 14 families, compute the SPRS score with the DoD Assessment Methodology, … | source |
hardening-windows-endpoint-with-cis-benchmark |
core | Hardens Windows endpoints using CIS (Center for Internet Security) Benchmark recommendations to reduce attack surface, enforce security baselines, and meet compliance requirements. Use when deploying new Windows workstations or servers, … | source |
implementing-gdpr-data-subject-access-request |
core | Automates GDPR Data Subject Access Request (DSAR) workflows including identity verification, PII discovery across databases and files using regex and NER, data mapping, response templating per Article 15 requirements, deadline tracking, … | source |
hardening-linux-endpoint-with-cis-benchmark |
core | Hardens Linux endpoints using CIS Benchmark recommendations for Ubuntu, RHEL, and CentOS to reduce attack surface, enforce security baselines, and meet compliance requirements. Use when deploying new Linux servers, remediating audit … | source |
implementing-aws-security-hub-compliance |
core | Implementing AWS Security Hub to aggregate security findings across AWS accounts, enable compliance standards like CIS AWS Foundations and PCI DSS, configure automated remediation with EventBridge and Lambda, and create custom security … | source |
Source: nexscope-ai/eCommerce-Skills
- Repository: https://github.com/nexscope-ai/eCommerce-Skills (commit
56f3288, retrieved 2026-07-14) - License: MIT
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
tiktok-shop-compliance |
core | TikTok Shop policies and compliance — restricted products, intellectual property, content guidelines | source |
Source: nexu-io/open-design
- Repository: https://github.com/nexu-io/open-design (commit
4b66023, retrieved 2026-07-14) - License: Apache-2.0
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
html-ppt-zhangzara-stencil-tablet |
core | A workplace-safety compliance review for a manufacturing regulator — findings, the evidence chain, and the corrective mandate. Built as a decision-grade policy briefing deck for regulator, plant leadership. | source |
Source: open-gitagent/opengap
- Repository: https://github.com/open-gitagent/opengap (commit
d7a8e2e, retrieved 2026-07-14) - License: MIT
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
document-review |
core | Reviews financial documents (prospectuses, ADVs, marketing materials) for FINRA 2210 compliance, required disclosures, and balanced presentation. Use when reviewing financial statements, audit documents, regulatory filings, or when the … | source |
Source: oubakiou/mdxg-redline
- Repository: https://github.com/oubakiou/mdxg-redline (commit
716ddb1, retrieved 2026-07-14) - License: MIT
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
md-review |
core | Run the standard markdown review loop end-to-end with the mdxg-redline CLI: send a markdown document to a human reviewer, wait (via Bash polling) for the feedback.json they export, then apply their location-aware inline comments back into … | source |
Source: rampstackco/claude-skills
- Repository: https://github.com/rampstackco/claude-skills (commit
bc6d961, retrieved 2026-07-14) - License: MIT
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
accessibility-audit |
core | Run a comprehensive WCAG accessibility audit covering perceivable, operable, understandable, and robust principles. Use this skill whenever the user wants to audit accessibility, review WCAG compliance, fix accessibility issues, prepare … | source |
seo-audit-orchestration |
core | Master orchestrator for a full SEO audit suite powered by the Ahrefs MCP. Use this skill when running a comprehensive SEO audit, scoping a quarterly health check, doing pre-acquisition SEO due diligence, or post-migration verification. … | source |
Source: secondsky/claude-skills
- Repository: https://github.com/secondsky/claude-skills (commit
c4889f6, retrieved 2026-07-14) - License: MIT
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
woocommerce-code-review |
core | Review WooCommerce code changes for coding standards compliance. Use when reviewing code locally, performing automated PR reviews, or checking code quality in WooCommerce projects. | source |
Source: sgcarstrends/backend
- Repository: https://github.com/sgcarstrends/backend (commit
7231cbc, retrieved 2026-07-14) - License: MIT
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
email-best-practices |
core | Use when building email features, emails going to spam, high bounce rates, setting up SPF/DKIM/DMARC authentication, implementing email capture, ensuring compliance (CAN-SPAM, GDPR, CASL), handling webhooks, retry logic, or deciding … | source |
Source: Sushegaad/Claude-Skills-Governance-Risk-and-Compliance
- Repository: https://github.com/Sushegaad/Claude-Skills-Governance-Risk-and-Compliance (commit
71d8920, retrieved 2026-07-14) - License: MIT
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
gdpr-compliance |
core | Expert GDPR compliance assistant covering all four core workflows: (1) auditing code and systems for GDPR violations, (2) drafting GDPR-compliant documents such as privacy policies, Data Processing Agreements (DPAs), and consent notices, … | source |
csrd |
core | Expert CSRD (Corporate Sustainability Reporting Directive, EU 2022/2464) compliance advisor. Use this skill whenever a user asks about CSRD, European Sustainability Reporting Standards (ESRS), double materiality assessment, sustainability … | source |
itar |
core | Expert ITAR compliance advisor for US defense contractors, exporters, and manufacturers. Use this skill for any question about 22 CFR Parts 120-130, the United States Munitions List (USML), DDTC registration, export license applications … | source |
Source: vibeeval/vibecosystem
- Repository: https://github.com/vibeeval/vibecosystem (commit
cea9462, retrieved 2026-07-14) - License: MIT
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
saas-launch-checklist |
core | Pre-launch verification across infrastructure, security, legal, payment, email, analytics, and performance. Day-1 monitoring, rollback plan, incident response skeleton, and post-launch week-1 checklist. | source |
contract-testing-patterns |
core | Pact consumer-driven contracts, provider verification, schema evolution | source |
compliance-patterns |
core | GDPR data handling, audit logging, data classification, retention policies, and consent management for regulatory compliance. | source |
gdpr-compliance |
core | GDPR compliance - data subject rights, lawful basis, DPIA, privacy by design, breach notification, consent management, cross-border transfers, PII masking | source |
hipaa-compliance |
core | HIPAA compliance - PHI protection, technical/administrative/physical safeguards, minimum necessary standard, BAA requirements, de-identification, access logging | source |
Source: zebbern/claude-code-guide
- Repository: https://github.com/zebbern/claude-code-guide (commit
d2c5280, retrieved 2026-07-14) - License: MIT
| Skill | Tier | What it adds | Upstream |
|---|---|---|---|
regulatory-audit-generator |
core | Builds compliance checklists for business scenarios involving GDPR, PIPL, or advertising/data laws. Outputs a structured checklist with check items, legal basis, risk levels, and actionable recommendations. Triggered by requests like "run … | source |
tos-clause-scanner |
core | Audit Terms of Service, user agreements, and privacy policies for consumer risks, producing a structured report that flags unfair clauses, data traps, and liability issues. Trigger when a user asks to review, audit, or analyze a ToS, … | source |