preparing-compliance-documentation

preparing-compliance-documentation is a skill for Claude Code from cockroachdb/claude-plugin. It costs 63 tokens per session (2,288 once invoked), scanned A, a copy of preparing-compliance-documentation, Apache-2.0.

A guide for preparing compliance evidence for CockroachDB Cloud, a hosted database service. It covers SOC 2, PCI DSS, ISO 27001, HIPAA, and GDPR requirements and related cluster settings.

In plain words
What is it for?
Use it to locate certification reports, map cloud security features to compliance controls, answer security questionnaires, and assess readiness for an audit.
Why use it?
It organizes the documents, security controls, and configuration checks needed for customer questionnaires or audits. It also helps identify which evidence and features apply to a deployment.

Skill for Claude Code ✓ vendor

Written for Claude Code: shipped in a Claude Code plugin.

Part of the cockroachdb plugin — 34 skills, 3 agents, 2 hooks, 2 MCP servers shipped together

Good fit Use it to locate certification reports, map cloud security features to compliance controls, answer security questionnaires, and assess readiness for an audit.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/cockroachdb/claude-plugin/preparing-compliance-documentation
About the project

CockroachDB Plugin for Claude Code connects Claude Code to CockroachDB clusters, which are distributed databases, so the agent can work with schemas, SQL queries, and database operations. It is intended for developers, database administrators, and operators working with self-hosted or CockroachDB Cloud deployments. The catalogue entries provide its MCP connections, specialized agents, skills, and safety hooks.

cockroachdb/claude-plugin · 4 stars · on GitHub

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add cockroachdb/claude-plugin --skill preparing-compliance-documentation
Clone the repo
git clone --depth 1 https://github.com/cockroachdb/claude-plugin

Made for: Claude Code.

Or install cockroachdb, the plugin that ships this one along with the rest of its 34 skills, 3 agents, 2 hooks, 2 MCP servers.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for preparing-compliance-documentation

README.md
[![agentmods](https://agentmods.dev/badge/skills/cockroachdb/claude-plugin/preparing-compliance-documentation/github.svg)](https://agentmods.dev/skills/cockroachdb/claude-plugin/preparing-compliance-documentation)
Your own site
<a href="https://agentmods.dev/skills/cockroachdb/claude-plugin/preparing-compliance-documentation"><img src="https://agentmods.dev/badge/skills/cockroachdb/claude-plugin/preparing-compliance-documentation/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for preparing-compliance-documentation

Your own site · 80×15
<a href="https://agentmods.dev/skills/cockroachdb/claude-plugin/preparing-compliance-documentation"><img src="https://agentmods.dev/badge/skills/cockroachdb/claude-plugin/preparing-compliance-documentation.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 63 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 2,288 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin 100% copy Near-identical to another mod in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00063 $0.02288
Opus 5.5 $0.00025 $0.00915
Sonnet 5.5 $0.00013 $0.00458
Haiku 4.5 $0.00006 $0.00229

Measured 2mo ago against content hash abe1a3631990, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

preparing-compliance-documentation scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2mo ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

Origin

This is a copy

100% identical to preparing-compliance-documentation — 0 lines differ, which has more behind it and is treated as the original. This page carries a canonical link to it rather than competing with it.

skills/cockroachdb-security-and-governance/preparing-compliance-documentation/SKILL.md · 215 lines

How it starts

The opening of the file, as written. The whole thing — 215 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Preparing Compliance Documentation

Guides the preparation of compliance documentation for CockroachDB Cloud deployments by identifying available certifications, mapping security features to compliance controls, and providing a configuration checklist for compliance readiness. Covers SOC 2 Type II, PCI DSS, ISO 27001, HIPAA, and GDPR.

When to Use This Skill

  • Responding to customer security questionnaires about CockroachDB Cloud
  • Preparing for SOC 2, PCI DSS, or HIPAA compliance audits
  • Locating CockroachDB Cloud certification documents (SOC 2 reports, PCI AOC, ISO certificates)
  • Assessing whether a cluster's configuration meets a specific compliance framework
  • Understanding which compliance features are available on each CockroachDB Cloud plan

Prerequisites

  • CockroachDB Cloud account — Any plan
  • Cloud Console access — For downloading compliance documents
  • Understanding of your compliance requirements — Which frameworks apply to your organization

Steps

1. Identify Available Certifications

CockroachDB Cloud maintains the following certifications and attestations:

Certification Type Scope Where to Find
SOC 2 Type II Attestation report Cloud infrastructure and operations Trust Center or request via support
PCI DSS Certificate of Compliance (AOC) Payment data processing Trust Center or request via support
ISO 27001 Certification Information security management Trust Center or request via support
HIPAA BAA eligibility Protected health information Contact sales for BAA execution
GDPR Compliance EU personal data protection DPA available on request

CockroachDB Cloud Trust Center: The Trust Center is the primary location for downloading compliance documents. Access it via the Cloud Console or request documents through a support ticket.

2. Map Compliance Controls to CockroachDB Features

See compliance matrix reference for a detailed mapping of compliance controls to CockroachDB features.

Read the full file on GitHub · 215 lines

Files

What ships with it

1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2mo ago First seen · 215 lines · 63 tokens per session scan A abe1a3631990

Subscribe to this mod's changes

preparing-compliance-documentation is a skill published in the GitHub repository cockroachdb/claude-plugin (4 stars, last pushed 28d ago), licensed Apache-2.0. It adds 63 tokens to every session and 2,288 once invoked, about $0.0003 per session on Opus 5.5. A static security scan graded it A with 0 findings. It is 100% identical to preparing-compliance-documentation, differing in 0 lines, and is treated as a copy.

Related

preparing-compliance-documentation compared with skills from other repositories

preparing-compliance-documentation next to 6 skills from other repositories
ModTypeStarsLast pushLicenceScanTokensWorks with
preparing-compliance-documentationcockroachdb/claude-pluginSkill428d agoApache-2.0A63Claude Code
preparing-compliance-documentationcockroachdb/cursor-pluginSkill228d agoApache-2.0A63Cursor
auditing-cloud-cluster-securitycockroachdb/cursor-pluginSkill228d agoApache-2.0A59Cursor
designing-application-transactionscockroachdb/cursor-pluginSkill228d agoApache-2.0A102Cursor
auditing-table-statisticscockroachdb/cursor-pluginSkill228d agoApache-2.0A55Cursor
profiling-transaction-fingerprintscockroachdb/cursor-pluginSkill228d agoApache-2.0A80Cursor
configuring-sso-and-scimcockroachdb/cursor-pluginSkill228d agoApache-2.0A91Cursor