vaquarkhan

192 mods in 1 plugin, 6 repositories, 1.5k stars between them.

vaquarkhan/compliance-agent-skills

Skill Claude CodeCodex

Implements HIPAA Privacy Rule minimum necessary standard—45 CFR §164.502(b)—plus §164.514 de-identification, Limited Data Sets, and patient rights to access and amend records, with agent prompt minimization, role-based PHI exposure, and integration with the Presidio redaction pipeline. Trigger when designing LLM/agent…

2 9d ago A 156 tokens original MIT

vaquarkhan/compliance-agent-skills

Skill Claude CodeCodex

Implements HIPAA Security Rule technical safeguards (45 CFR §164.312)—access control, audit controls, integrity, person/entity authentication, and transmission security—for AI agents, MCP servers, and LLM pipelines. Trigger when assessing ePHI handling in agent architectures, MCP tool authorization, encryption in…

2 9d ago A 119 tokens original MIT

vaquarkhan/compliance-agent-skills

Skill Claude CodeCodex

Implements HITECH Act breach notification depth beyond baseline HIPAA—42 U.S.C. §17921–17923, ARRA Title XIII Subtitle D, OCR breach reporting portal workflows, 500+ individual media/HHS rules, business associate direct liability, encryption/unsecured PHI safe harbor analysis, and accounting of disclosures for…

2 9d ago A 165 tokens original MIT

vaquarkhan/compliance-agent-skills

Skill Claude CodeCodex

Implements ISO/IEC 27001:2022 Annex A control assessment—93 controls across Organizational, People, Physical, and Technological themes—covering Statement of Applicability (SoA), risk treatment, and implementation evidence. Trigger when building or auditing an ISMS, mapping Annex A to existing controls, preparing ISO…

2 9d ago A 142 tokens original MIT

vaquarkhan/compliance-agent-skills

Skill Claude CodeCodex

Hardens Model Context Protocol (MCP) server integrations for compliance—OAuth 2.1, PKCE, scoped tool sets, transport security, and patterns for Playwright, Postgres, Slack, and Presidio MCP servers in audit workflows. Trigger when deploying, configuring, or auditing MCP servers for HIPAA, PCI, or SOC 2 agent…

2 9d ago A 113 tokens original MIT

vaquarkhan/compliance-agent-skills

Skill Claude CodeCodex

Implements NIST AI Risk Management Framework (AI RMF 1.0, NIST AI 100-1)—GOVERN, MAP, MEASURE, and MANAGE functions—for trustworthy AI systems including LLM agents, MCP toolchains, and automated compliance workflows. Trigger when assessing AI governance, model risk, agent trustworthiness, GenAI deployment controls, or…

2 9d ago A 163 tokens original MIT

nist-csf-2-assessment

127

vaquarkhan/compliance-agent-skills

Skill Claude CodeCodex

Performs NIST Cybersecurity Framework 2.0 gap assessments across six Functions—Govern, Identify, Protect, Detect, Respond, Recover—using CSF 2.0 categories, subcategories, Implementation Tiers, and Organizational Profiles. Trigger when benchmarking security posture, preparing executive risk reporting, assessing…

2 9d ago A 151 tokens original MIT

vaquarkhan/compliance-agent-skills

Skill Claude CodeCodex

Audits PCI-DSS v4.0 Requirement 3 (protect stored account data) and Requirement 4 (protect cardholder data with strong cryptography during transmission)—covering key management lifecycle, HSM usage, PAN masking, tokenization, and TLS 1.2+ enforcement with Terraform/Vault MCP patterns for evidence collection. Trigger…

2 9d ago A 158 tokens original MIT

vaquarkhan/compliance-agent-skills

Skill Claude CodeCodex

Validates PCI-DSS v4.0 network segmentation and scope reduction—Requirement 1.x (firewalls, network security controls) and 2.x (secure configurations)—for Cardholder Data Environment (CDE) isolation. Trigger when scoping PCI environments, reviewing firewall rules, VLAN segmentation, agent/MCP access to CDE, or…

2 9d ago A 115 tokens original MIT

pci-dss-script-audit

130

vaquarkhan/compliance-agent-skills

Skill Claude CodeCodex

Automates PCI-DSS v4.0 Requirements 6.4.3 (payment-page script authorization, inventory, integrity hashes, and business justification) and 11.6.1 (weekly change/tamper detection for HTTP security headers and DOM scripts). Trigger when auditing ecommerce checkout or payment pages, validating third-party JavaScript…

2 9d ago A 115 tokens original MIT

vaquarkhan/compliance-agent-skills

Skill Claude CodeCodex

Implements Continuous Control Monitoring (CCM) for SOC 2—automated control testing, configuration drift detection, predictive risk scoring, and alerting—for agent platforms, MCP servers, and cloud infrastructure. Trigger when building always-on compliance dashboards, detecting TSC control drift between audits, or…

2 9d ago A 111 tokens original MIT

vaquarkhan/compliance-agent-skills

Skill Claude CodeCodex

Automates SOC 2 evidence gathering—screenshots, configuration exports, access reviews, log samples, and audit-trail packaging with integrity hashes—for AICPA TSC examinations. Trigger when preparing audit binders, populating Vanta/Drata-style evidence requests, or packaging agent/MCP compliance artifacts. Do not use…

2 9d ago A 102 tokens original MIT

vaquarkhan/compliance-agent-skills

Skill Claude CodeCodex

Maps organizational controls and evidence to AICPA SOC 2 Trust Services Criteria (2017 TSC with 2022 revisions)—Security (CC), Availability (A), Confidentiality (C), Processing Integrity (PI), and Privacy (P). Trigger when scoping SOC 2 audits, gap assessments, control design reviews, or mapping agent/MCP architecture…

2 9d ago A 116 tokens original MIT

sox-itgc-audit

134

vaquarkhan/compliance-agent-skills

Skill Claude CodeCodex

Performs Sarbanes-Oxley Act (SOX) IT General Controls (ITGC) audits aligned to COSO Internal Control—Integrated Framework and PCAOB AS 2201—covering access to programs and data, program change management, program development, and computer operations relevant to financial reporting systems. Trigger when preparing SOX…

2 9d ago A 162 tokens original MIT

us-state-privacy-laws

135

vaquarkhan/compliance-agent-skills

Skill Claude CodeCodex

Implements comprehensive US state comprehensive privacy law assessments—Virginia VCDPA (Va. Code §59.1-575), Colorado CPA (C.R.S. §6-1-1301), Connecticut CTDPA, Utah UCPA, Texas TDPSA, Oregon OCPA, Montana MCDPA, Iowa ICDPA, Delaware DPDPA, New Jersey, and harmonized multi-state consumer rights programs—for agent/LLM…

2 9d ago A 189 tokens original MIT

vaquarkhan/compliance-agent-skills

Skill Claude CodeCodex

Meta entry skill for the USA compliance agent repository. Routes tasks to HIPAA, HITECH, PCI-DSS, SOC 2, ISO 27001, NIST CSF 2.0, CCPA/CPRA, US state privacy, GDPR, FedRAMP, SOX, CMMC, and GLBA skills; configures presets, MCP servers, and the audit lifecycle (/scope, /audit, /evidence, /remediate, /report). Trigger…

2 9d ago A 149 tokens original MIT

vaquarkhan/compliance-agent-skills

Skill Claude CodeCodex

Performs third-party and vendor risk assessments for compliance programs—security questionnaires, SOC 2 report review, control inheritance, and ongoing monitoring—for LLM, cloud, MCP, and GRC tool vendors (Vanta/Drata alternative operational mindset). Trigger when onboarding vendors, annual vendor reviews, or…

2 9d ago A 114 tokens original MIT

At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: