Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add BuilderCed/agent-skills --skill eu-ai-act-compliancegit clone --depth 1 https://github.com/BuilderCed/agent-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/builderced/agent-skills/eu-ai-act-compliance)<a href="https://agentmods.dev/skills/builderced/agent-skills/eu-ai-act-compliance"><img src="https://agentmods.dev/badge/skills/builderced/agent-skills/eu-ai-act-compliance/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/builderced/agent-skills/eu-ai-act-compliance"><img src="https://agentmods.dev/badge/skills/builderced/agent-skills/eu-ai-act-compliance.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00036 | $0.01457 |
| Opus 5 | $0.00018 | $0.00728 |
| Sonnet 5 | $0.00007 | $0.00291 |
| Haiku 4.5 | $0.00004 | $0.00146 |
Grade A, and why
eu-ai-act-compliance scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 10d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 180 lines — stays where its author put it; the contents beside it link to each section on GitHub.
EU AI Act Compliance
DISCLAIMER: This skill provides guidance only. It does not constitute legal advice. Always verify with qualified legal professionals. The authors assume no liability for decisions made based on this skill's output.
When to Use
Use this skill when:
- Building or deploying an AI system in the EU market
- Assessing whether your system falls under AI Act obligations
- Preparing disclosure notices for users interacting with AI
- Designing audit trail logging for AI systems
- Preparing documentation for EU AI Database registration
Step 1: Risk Classification
Classify the AI system using the four-tier framework from Regulation (EU) 2024/1689:
Prohibited (Article 5) — CANNOT be deployed
- Social scoring by public authorities
- Real-time remote biometric identification in public spaces (with exceptions)
- Emotion recognition in workplace/education
- Predictive policing based solely on profiling
- Untargeted facial image scraping
High-Risk (Annex III) — Requires full conformity assessment
- Biometric identification and categorization
- Critical infrastructure management (water, gas, electricity, transport)
- Education and vocational training (admissions, assessment)
- Employment (recruitment, task allocation, termination)
- Essential services access (credit scoring, emergency services)
- Law enforcement (evidence evaluation, risk assessment)
- Migration and border control
- Justice and democratic processes
Limited Risk (Article 50) — Transparency obligations
- Chatbots and conversational AI (must disclose AI nature)
- Emotion recognition systems (must inform subjects)
- Deep fakes and synthetic content (must label)
- AI-generated text published to inform public (must label)
Minimal Risk — No specific obligations
- Spam filters, AI-enabled video games, inventory management
Action: Determine which tier applies. If High-Risk, proceed to Step 2. If Limited Risk, proceed to Step 3. If Prohibited, stop deployment.
Step 2: High-Risk Compliance (Annex III Systems)
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 10d ago First seen · 180 lines · 36 tokens per session scan A 768b41db9aa0
eu-ai-act-compliance is a skill published in the GitHub repository BuilderCed/agent-skills (2 stars, last pushed 4mo ago), licensed MIT. It adds 36 tokens to every session and 1,457 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
compliance-review
Build or review code for compliance with the EU AI Act, GDPR, the NIS2 Directive (EU 2022/2555), and secure-development (SSDLC) best practice. Three modes. REVIEW: audit a repo and produce an evidence-based gap analysis — triggers on "compliance review", "gap analysis", "NIS2 check", "is this repo GDPR compliant"…
legal-verify-experts
Liefert Empfehlungen fuer Fachanwaelte, Kanzleien und Verifizierungs-Tools zu einem Rechtsthema. Nutze diese Skill wenn /legal-verify aufgerufen wird ODER wenn der User nach einem "Anwalt fuer ...", "Kanzlei fuer ...", "Tool zur Pruefung von ..." fragt.
legal-audit-codebase
Fuehrt einen systematischen Rechts-Audit einer Codebase durch (DE/EU-Scope). Nutze diese Skill wenn /legal-audit aufgerufen wird ODER wenn der User eine Codebase auf DSGVO/UWG/AGB/DDG/AI-Act/BFSG/UrhG/NIS2-Probleme untersuchen lassen will.
legal-kb-lookup
Laedt gezielt Knowledge-Base-Chunks zu einem rechtlichen Thema. Nutze diese Skill wenn /legal-kb aufgerufen wird ODER wenn der User eine spezifische Rechtsinformation braucht (z.B. "Erklaer mir Cookie-Consent", "Was sagt Art. 30 DSGVO?", "Welche Urteile gibt es zu Google Fonts?").
legal-update-sources
Aktualisiert KB-Artikel gegen Primaerquellen. Nutze diese Skill wenn /legal-update aufgerufen wird ODER wenn ein KB-Artikel aelter als 90 Tage ist und im aktuellen Arbeitskontext verwendet wird.
complyant
Fast, token-efficient compliance answers with citations. Covers GDPR, AI Act, PECR, HIPAA, TCPA, FCA rules, CAN-SPAM, CCPA, and more. Use when you need to know what regulations say about data, marketing, AI, financial services, or communications.