Files
pipeline-compliance-coordin…/references/ai-skills.md
2026-08-14 17:59:33 +02:00

39 KiB

External AI agent skills — pipeline-compliance-coordinator

Proven, publicly available AI agent skills mapped to this occupation. Nothing is copied from the sources: every entry is a name, a one-line summary and a link to the upstream skill package. Each section names its source repository, commit, license and retrieval date.

Tiers: core = the skill directly exercises a top market hard skill, tool or method (from gated job-ad evidence) or an essential ESCO competence of this occupation; adjacent = plausibly useful, secondary. Entries are capped at 12 per source and 80 in total per occupation (core first, strongest matches survive); everything beyond the caps is excluded and logged in the pipeline audit trail, not in this package.

Matched deterministically (ISCO group + title/competence keywords, tiered against market evidence + ESCO essentials) by pipeline/p5_enrich_ai_skills.py on 2026-07-14.

Source: anthropics/skills

  • Repository: https://github.com/anthropics/skills (commit f6656c1, retrieved 2026-07-14)
  • License: Apache-2.0; the document skills (docx/pdf/pptx/xlsx) are source-available — see the LICENSE.txt in the upstream skill folder
Skill Tier What it adds Upstream
docx core Use this skill whenever the user wants to create, read, edit, or manipulate Word documents (.docx files) or Word templates (.dotx files). Triggers include: any mention of 'Word doc', 'word document', '.docx', '.dotx', or requests to … source
pdf adjacent Use this skill whenever the user wants to do anything with PDF files. This includes reading or extracting text/tables from PDFs, combining or merging multiple PDFs into one, splitting PDFs apart, rotating pages, adding watermarks, creating … source

Source: a5c-ai/babysitter

Skill Tier What it adds Upstream
collection-documentation core Create and maintain comprehensive collection records including cataloging, photography, condition documentation, and database management following AAM/ICOM standards source
constitution-creation core Establish project governing principles including dev guidelines, code quality standards, testing policies, UX requirements, performance benchmarks, and security constraints. source
pip-documentation core Create legally compliant performance improvement plan documentation with evidence tracking and milestone management source
regulatory-compliance-assessment core Evaluate organizational compliance with healthcare regulations including HIPAA, CMS Conditions of Participation, and accreditation standards through gap analysis and audit procedures source
iso-nanotechnology-compliance-checker core Regulatory compliance skill for ISO nanotechnology standards verification and documentation source
safety-critical-testing core Implement safety-critical testing for embedded systems per IEC 61508, ISO 26262, or DO-178C standards. source
standard-work-documenter core Standardized work procedure documentation skill with time observations, work sequence analysis, and visual work instructions source
unity-addressables core Unity Addressables asset management skill for remote catalogs, content updates, asset bundles, and memory-efficient asset loading. source
embedded-docs core Embedded firmware documentation generation and maintenance using Doxygen and related tools. Expert skill for API documentation, hardware interface documentation, memory maps, and integration with documentation systems. source
evidence-justification-assessment core Evaluate epistemic warrant, assess evidence quality and relevance, apply epistemic standards appropriate to different domains, and identify sources of knowledge source

Source: affaan-m/everything-claude-code

Skill Tier What it adds Upstream
knowledge-ops core Knowledge base management, ingestion, sync, and retrieval across multiple storage layers (local files, MCP memory, vector stores, Git repos). Use when the user wants to save, organize, sync, deduplicate, or search across their knowledge … source

Source: AIDevGTM/gtm-cofounder

Skill Tier What it adds Upstream
review-the-work core Before showing the founder any substantive GTM deliverable (positioning, value prop, homepage, launch post, pricing, sales script, the brief or roadmap), stress-test it against the standard as an independent critic, because the agent that … source

Source: alirezarezvani/claude-skills

Skill Tier What it adds Upstream
iso42001-specialist core ISO/IEC 42001:2023 AI Management System (AIMS) specialist for compliance teams running internal audits. Three decisions: (1) Where are the gaps against Clauses 4-10 and what do we close first? (2) What goes in the AI risk register and … source

Source: anthropics/skills

Skill Tier What it adds Upstream
brand-guidelines core Applies Anthropic's official brand colors and typography to any sort of artifact that may benefit from having Anthropic's look-and-feel. Use it when brand colors or style guidelines, visual formatting, or company design standards apply. source

Source: basicmachines-co/basic-memory

Skill Tier What it adds Upstream
memory-tasks core Task management via Basic Memory schemas: create, track, and resume structured tasks that survive context compaction. Uses BM's schema system for uniform notes queryable through the knowledge graph. source

Source: brycewang-stanford/Auto-Empirical-Research-Skills

Skill Tier What it adds Upstream
referee-report core Generate academic referee reports for economics/finance papers, followed by a 150-word letter to the editor with recommendation (Reject / Major Revision) and Kai Wu signature. Two modes (normal / high-level), configurable number of … source
research-lit core Search and analyze research papers, find related work, summarize key ideas. Use when user says "find papers", "related work", "literature review", "what does this paper say", or needs to understand academic papers. source
review-julia core Run the Julia code review protocol on Julia scripts. Checks code quality, type stability, parallel computing patterns, and scientific computing standards. Produces a report without editing files. source
review-r core Run the R code review protocol on R scripts. Checks code quality, reproducibility, domain correctness, and professional standards. Produces a report without editing files. source

Source: Chachamaru127/claude-code-harness

Skill Tier What it adds Upstream
ci core CI red? Call us. Pipeline fire brigade deploys. Use when user mentions CI failures, build errors, test failures, or pipeline issues. Do NOT load for: local builds, standard implementation work, reviews, or setup. source

Source: davepoon/buildwithclaude

Skill Tier What it adds Upstream
brand-guidelines core Applies Anthropic's official brand colors and typography to any sort of artifact that may benefit from having Anthropic's look-and-feel. Use it when brand colors or style guidelines, visual formatting, or company design standards apply. source

Source: davila7/claude-code-templates

Skill Tier What it adds Upstream
it-operations core Manages IT infrastructure, monitoring, incident response, and service reliability. Provides frameworks for ITIL service management, observability strategies, automation, backup/recovery, capacity planning, and operational excellence … source
agent-memory-mcp core A hybrid memory system that provides persistent, searchable knowledge management for AI agents (Architecture, Patterns, Decisions). source
brand-guidelines core Applies Anthropic's official brand colors and typography to any sort of artifact that may benefit from having Anthropic's look-and-feel. Use it when brand colors or style guidelines, visual formatting, or company design standards apply. source
brenda-database core Access BRENDA enzyme database via SOAP API. Retrieve kinetic parameters (Km, kcat), reaction equations, organism data, and substrate-specific enzyme information for biochemical research and metabolic pathway analysis. source
lint-and-validate core Automatic quality control, linting, and static analysis procedures. Use after every code modification to ensure syntax correctness and project standards. Triggers onKeywords: lint, format, check, validate, types, static analysis. source
Data Privacy Compliance core Data privacy and regulatory compliance specialist for GDPR, CCPA, HIPAA, and international data protection laws. Use when implementing privacy controls, conducting data protection impact assessments, ensuring regulatory compliance, or … source

Source: DheerG/swarms

Skill Tier What it adds Upstream
define-rubric core Builds measurable validation criteria when no existing standards apply. Invoked by team agents during review. source

Source: foryourhealth111-pixel/Vibe-Skills

Skill Tier What it adds Upstream
scientific-reporting core Write research/technical reports with strong structure + figure standards. Supports Markdown/HTML/PDF outputs (Quarto optional), executive summary, methods, results, discussion, and reproducibility appendix. source

Source: huangjia2019/claude-code-engineering

Skill Tier What it adds Upstream
quality-checking core Validate API documentation against quality standards. Use when you need to verify generated docs are complete and correct. source

Source: jabrena/plinth

Skill Tier What it adds Upstream
130-java-testing-strategies core Use when you need to apply testing strategies for Java code — RIGHT-BICEP to guide test creation, A-TRIP for test quality characteristics, or CORRECT for verifying boundary conditions. This should trigger for requests such as Review Java … source
125-java-concurrency core Use when you need to apply Java concurrency best practices — including thread safety fundamentals, ExecutorService thread pool management, concurrent design patterns like Producer-Consumer, asynchronous programming with CompletableFuture, … source
701-technologies-openapi core Use when you need framework-agnostic OpenAPI 3.x guidance — spec structure, metadata and versioning, paths and operations, reusable schemas, security schemes, examples, documentation quality, contract validation (e.g. Spectral), … source

Source: jeremylongshore/claude-code-plugins-plus-skills

Skill Tier What it adds Upstream
flexport-ci-integration core Configure CI/CD pipelines for Flexport logistics integrations with GitHub Actions, automated API contract testing, and deployment workflows. Trigger: "flexport CI", "flexport GitHub Actions", "flexport CI/CD pipeline". source
alchemy-ci-integration core Configure CI/CD pipeline for Alchemy-powered Web3 applications. Use when setting up automated testing with Hardhat forks, smart contract verification, or testnet deployment pipelines. Trigger: "alchemy CI", "alchemy GitHub Actions", "web3 … source
granola-ci-integration core Build automated pipelines from Granola meeting notes to GitHub Issues, Linear tasks, Slack notifications, and documentation updates using Zapier and GitHub Actions. Trigger: "granola CI", "granola automation pipeline", "granola to github", … source
anima-sdk-patterns core Apply production-ready patterns for the Anima SDK design-to-code pipeline. Use when building reusable Anima client wrappers, implementing output caching, or establishing team standards for design-to-code automation. Trigger: "anima SDK … source
generating-compliance-reports core Generate comprehensive compliance reports for security standards. Use when creating compliance documentation. Trigger with 'generate compliance report', 'compliance status', or 'audit compliance'. source
shopify-sdk-patterns core Apply production-ready patterns for @shopify/shopify-api including typed GraphQL clients, session management, and retry logic. Use when implementing Shopify integrations, refactoring SDK usage, or establishing team coding standards for … source
trace core Use when encountering bugs, test failures, runtime errors, broken builds, or "this doesn't work" reports. Systematic root-cause analysis before any patch — never blind-patches symptoms. Standalone, ends with a final-integration review of … source
twinmind-reference-architecture core Production architecture for meeting AI systems using TwinMind: transcription pipeline, memory vault, action item workflow, and calendar integration. Use when implementing reference architecture, or managing TwinMind meeting AI operations. … source
audit core Use when the user wants a code review on recent changes — quality, spec, security, or performance feedback. Triggers a multi-level (L1-L5) review with a standalone Reviewer; on NEEDS_FIX, offers to apply findings via /hyperflow:plan. … source
compliance-audit core Performs regulatory gap analysis across 7 compliance frameworks with a scored report card and prioritized remediation roadmap. Use when assessing a website or application for GDPR, CCPA, ADA, PCI-DSS, CAN-SPAM, COPPA, or SOC 2 compliance. … source
maintainx-core-workflow-b core Execute MaintainX secondary workflow: Asset and Location management. Use when managing equipment assets, organizing locations/facilities, building asset hierarchies, and tracking equipment maintenance history. Trigger with phrases like … source
twinmind-core-workflow-b core Execute TwinMind secondary workflow: Action item extraction and follow-up automation. Use when automating meeting follow-ups, extracting tasks, or integrating with project management tools. Trigger with phrases like "twinmind action … source

Source: levnikolaevich/claude-code-skills

Skill Tier What it adds Upstream
ln-24-architecture-auditor core Audits implemented architecture fitness, boundaries, contracts, dependencies, and configuration ownership. Use for system structure; not for current-state documentation, diagrams, or plan review. source

Source: mohitagw15856/pm-claude-skills

Skill Tier What it adds Upstream
ai-usage-policy core Write an AI usage policy people can actually follow — approved tools, data rules, disclosure duties, and review obligations, in one page instead of legal fog. Use when asked for a company AI policy, acceptable-use rules for … source
kb-audit core Audit a knowledge base / help center for coverage, accuracy, and findability. Use when asked to audit a help center, review KB health, find documentation gaps, reduce ticket volume with better docs, or prioritise what to write/fix. … source
sprint-velocity-analysis core Analyze sprint velocity data and produce an engineering team health report covering delivery trends, capacity utilization, and improvement recommendations. Use when asked to analyze sprint velocity, review team delivery health, identify … source

Source: mukul975/Anthropic-Cybersecurity-Skills

Skill Tier What it adds Upstream
implementing-iso-27001-information-security-management core ISO/IEC 27001:2022 is the international standard for establishing, implementing, maintaining, and continually improving an Information Security Management System (ISMS). This skill covers the complete source
achieving-cmmc-level-2-compliance core Prepare a defense-contractor environment for CMMC Level 2 certification: scope CUI and FCI, implement the 110 NIST SP 800-171 Rev 2 security requirements across 14 families, compute the SPRS score with the DoD Assessment Methodology, … source
analyzing-macro-malware-in-office-documents core Analyzes malicious VBA macros embedded in Microsoft Office documents (Word, Excel, PowerPoint) to identify download cradles, payload execution, persistence mechanisms, and anti-analysis techniques. Uses olevba, oledump, and VBA … source

Source: nexu-io/open-design

Skill Tier What it adds Upstream
rewrite-plan core Author a long-running multi-file rewrite plan that subsequent patch-edit + diff-review + build-test stages will execute, with explicit ownership boundaries and patch-safety guarantees. source
clinical-case-report core Structured medical case presentation for clinical rounds, conferences, and documentation. Generates SOAP-format or narrative case reports with physiologically accurate vitals, labs, and evidence-based plans. Use when the brief mentions … source
brand-guidelines core Apply Anthropic's official brand colors and typography to artifacts for consistent visual identity and professional design standards. A reference for shaping your own. source

Source: nWave-ai/nWave

Skill Tier What it adds Upstream
nw-security-and-governance core Database security (encryption, access control, injection prevention), data governance (lineage, quality, MDM), and compliance frameworks (GDPR, CCPA, HIPAA) source

Source: open-gitagent/opengap

Skill Tier What it adds Upstream
document-review core Reviews financial documents (prospectuses, ADVs, marketing materials) for FINRA 2210 compliance, required disclosures, and balanced presentation. Use when reviewing financial statements, audit documents, regulatory filings, or when the … source

Source: pedrohcgs/claude-code-my-workflow

Skill Tier What it adds Upstream
review-r core Read-only R code review protocol for .R scripts. Checks code quality, reproducibility, domain correctness, tidyverse idioms, and professional standards; produces a report without editing. Use when user says "review this R script", "check … source

Source: rampstackco/claude-skills

Skill Tier What it adds Upstream
qa-testing core Run QA testing on a page, feature, or full site at one of three depth tiers (smoke, standard, full). Use this skill whenever the user asks to test a page, audit a site, check for bugs, verify a deploy, run a QA sweep, or review … source
design-standards core Apply production-grade design standards when building or reviewing pages, components, or UI. Use this skill whenever the user asks to build a page, design a component, lay out a section, review the UI, fix the layout, or check design … source

Source: ruvnet/claude-code-flow

Skill Tier What it adds Upstream
Hooks Automation core Automated coordination, formatting, and learning from Claude Code operations using intelligent hooks with MCP integration. Includes pre$post task hooks, session management, Git integration, memory coordination, and neural pattern training … source
memory-management core AgentDB memory system with HNSW vector search. Provides 150x-12,500x faster pattern retrieval, persistent storage, and semantic search capabilities for learning and knowledge management. Use when: need to store successful patterns, … source
AgentDB Memory Patterns core Implement persistent memory patterns for AI agents using AgentDB. Includes session memory, long-term storage, pattern learning, and context management. Use when building stateful agents, chat systems, or intelligent assistants. source

Source: ruvnet/ruflo

Skill Tier What it adds Upstream
Hooks Automation core Automated coordination, formatting, and learning from Claude Code operations using intelligent hooks with MCP integration. Includes pre$post task hooks, session management, Git integration, memory coordination, and neural pattern training … source
memory-management core AgentDB memory system with HNSW vector search. Provides 150x-12,500x faster pattern retrieval, persistent storage, and semantic search capabilities for learning and knowledge management. Use when: need to store successful patterns, … source
AgentDB Memory Patterns core Implement persistent memory patterns for AI agents using AgentDB. Includes session memory, long-term storage, pattern learning, and context management. Use when building stateful agents, chat systems, or intelligent assistants. source

Source: samber/cc-skills-golang

Skill Tier What it adds Upstream
golang-continuous-integration core CI/CD pipeline configuration using GitHub Actions for Golang projects — testing, linting, SAST, security scanning, code coverage, Dependabot, Renovate, GoReleaser, code review automation, and release pipelines. Use when setting up or … source
golang-security core Security best practices and vulnerability prevention for Golang. Covers injection (SQL, command, XSS), cryptography, filesystem safety, network security, cookies, secrets management, memory safety, and logging. Apply when writing, … source

Source: secondsky/claude-skills

Skill Tier What it adds Upstream
mobile-app-testing core Mobile app testing with unit tests, UI automation, performance testing. Use for test infrastructure, E2E tests, testing standards, or encountering test framework setup, device farms, flaky tests, platform-specific test errors. source

Source: snyk/agent-scan

Skill Tier What it adds Upstream
brand-guidelines core Applies Anthropic's official brand colors and typography to any sort of artifact that may benefit from having Anthropic's look-and-feel. Use it when brand colors or style guidelines, visual formatting, or company design standards apply. source

Source: ThinkInAIXYZ/deepchat

Skill Tier What it adds Upstream
memory-management core Guide the agent to recall, remember, and route durable learning into Memory, Skills, Scheduled Tasks, or Tape. source

Source: trailofbits/skills

Skill Tier What it adds Upstream
audit-prep-assistant core Prepares codebases for security review using Trail of Bits' checklist. Helps set review goals, runs static analysis tools, increases test coverage, removes dead code, ensures accessibility, and generates documentation (flowcharts, user … source
code-maturity-assessor core Systematic code maturity assessment using Trail of Bits' 9-category framework. Analyzes codebase for arithmetic safety, auditing practices, access controls, complexity, decentralization, documentation, MEV risks, low-level code, and … source
guidelines-advisor core Smart contract development advisor based on Trail of Bits' best practices. Analyzes codebase to generate documentation/specifications, review architecture, check upgradeability patterns, assess implementation quality, identify pitfalls, … source

Source: vibeeval/vibecosystem

Skill Tier What it adds Upstream
compliance-patterns core GDPR data handling, audit logging, data classification, retention policies, and consent management for regulatory compliance. source

Source: wanshuiyin/Auto-claude-code-research-in-sleep

Skill Tier What it adds Upstream
research-lit core Search and analyze research papers, find related work, summarize key ideas. Use when user says "find papers", "related work", "literature review", "what does this paper say", or needs to understand academic papers. source

Source: zebbern/claude-code-guide

Skill Tier What it adds Upstream
regression-modeler core Run regression analysis (OLS or logistic) on uploaded CSV/Excel data, generating coefficients, R², p-values, VIF, and plain-language interpretation. Triggered by requests for regression modeling, fitting data, testing significance, … source
tos-clause-scanner core Audit Terms of Service, user agreements, and privacy policies for consumer risks, producing a structured report that flags unfair clauses, data traps, and liability issues. Trigger when a user asks to review, audit, or analyze a ToS, … source