compliance skills

microsoft/agent-governance-toolkit

Skill Claude CodeCodex

Create and validate a minimal AGT Copilot CLI policy tailored to the repository being inspected.

intuitem/ciso-assistant-community

Skill Claude CodeCodex

Guide users through a basic risk assessment workflow in CISO Assistant, from asset identification to scenario creation. Use when: (1) User wants to start a risk assessment from scratch (2) User mentions "risk assessment", "identify risks", "threat scenarios", or "risk register" (3) User asks about qualitative vs…

intuitem/ciso-assistant-community

Skill Claude CodeCodex

Build a reviewed crosswalk (RequirementMappingSet YAML library + review xlsx/csv) between two CISO Assistant framework YAML files using Claude itself as the reasoning engine. Zero infrastructure — stdlib + pyyaml only, no embedders, no LM Studio, no Qdrant. Use when the user asks to map / crosswalk / generate a…

intuitem/ciso-assistant-community

Skill Claude CodeCodex

Enrich a CISO Assistant framework YAML by linking each assessable requirement to reference control URNs from the central doc-pol library (CISO Assistant Key Reference Controls). Produces a reviewable xlsx and patches the framework YAML in place. Use when the user asks to "add reference controls to framework X", "link…

RevylAI/greenlight

Skill Claude CodeCodex

It now lives at skills/greenlight/SKILL.md.

RevylAI/greenlight

Skill Claude CodeCodex

Pre-submission compliance scanner workflow for Apple App Store apps. Use when reviewing iOS, macOS, tvOS, watchOS, or visionOS projects (Swift, Objective-C, React Native, Expo) for App Store rejection risks, submission readiness, privacy compliance, or guideline violations.

AgentEra/Agently

Skill Claude CodeCodex

Audit a vendor agreement or contract: extract key clauses, check that required clause categories are present, flag compliance gaps and risks, and emit a structured audit summary. Use for compliance, contract review, audit, and vendor agreement requests.

Sushegaad/Claude-Skills-Governance-Risk-and-Compliance

Skill Claude CodeCodex

Expert EU Cyber Resilience Act (CRA) advisor for Regulation (EU) 2024/2847 — mandatory cybersecurity and vulnerability handling requirements for all products with digital elements (PDEs) sold in the EU. Use this skill for gap analysis, product classification (Default / Class I / Class II), conformity assessment route…

Sushegaad/Claude-Skills-Governance-Risk-and-Compliance

Skill Claude CodeCodex

Expert guidance for FedRAMP certification and compliance under CR26 (FedRAMP Consolidated Rules for 2026). Use this skill whenever a user asks about FedRAMP authorization, ATO (Authority to Operate), cloud security for federal government, NIST SP 800-53 controls, CSP compliance, or any of the core FedRAMP document…

Sushegaad/Claude-Skills-Governance-Risk-and-Compliance

Skill Claude CodeCodex

Expert ISO 42001 AI Management System (AIMS) compliance advisor. Use this skill whenever a user asks about ISO/IEC 42001:2023, AI governance, AI management systems, AI risk assessment, AI system impact assessment, Annex A controls for AI, Statement of Applicability for AI systems, AI policy, responsible AI, AI…

chainloop-dev/chainloop

Skill Claude CodeCodex

Create a custom builtin function to be used in the Rego policy engine.

chainloop-dev/chainloop

Skill Claude CodeCodex

Reviews open Dependabot pull requests, assesses their risk level based on version bump type and CI status, approves low-risk PRs, and merges them. Use when asked to process, review, merge, or triage Dependabot PRs.

chainloop-dev/chainloop

Skill Claude CodeCodex

Upgrades Helm chart dependencies (PostgreSQL, Vault) in the Chainloop project, including vendorized charts, container images, and CI/CD workflows. Use when the user mentions upgrading Helm charts, Bitnami dependencies, PostgreSQL chart, or Vault chart. CRITICAL - Major version upgrades are FORBIDDEN and must be…

Superagentsys/novalclaw

Skill Claude CodeCodex

An AI assistant for reviewing contracts and identifying legal risks across several national and European Union legal systems. It can also process contract documents in batches.

SHAdd0WTAka/Zen-Ai-Pentest

Skill Claude CodeCodex

Proof-of-Concept (PoC) Validation Skill for security exploit verification. Use when validating exploitability of vulnerabilities, generating tailored payloads, executing exploits in sandboxed environments, or verifying successful exploitation (e.g., SQL injection, CVE exploitation, command injection). Triggers on…

SHAdd0WTAka/Zen-Ai-Pentest

Skill Claude CodeCodex

Module Loop and Iteration Skill for orchestrating multi-phase penetration testing workflows. Use when coordinating sequential tool execution, managing dependencies between reconnaissance and vulnerability scanning modules, implementing adaptive fallback strategies, or managing workflow state across iterations.…

SHAdd0WTAka/Zen-Ai-Pentest

Skill Claude CodeCodex

Parallel research with 4 specialized agents (Official, Practical, Edge Cases, Future).

claude-office-skills/skills

Skill Claude CodeCodex

Analyze contracts for risks, check completeness, and provide actionable recommendations. Supports employment contracts, NDAs, service agreements, and more.

GRCEngClub/claude-grc-engineering

Skill Claude CodeCodex

Guide a research project through the full academic lifecycle — from raw idea to concrete research question, literature grounding, methodology, writing, feedback, and publication. Use this skill whenever the user shares a research idea, asks to "flesh out" a topic, wants sources or a literature review, asks about…

GRCEngClub/claude-grc-engineering

Skill Claude CodeCodex

Expertise in evaluating AWS accounts for compliance — what checks are meaningful, which SCF controls they map to, and how to interpret aws CLI output.

GRCEngClub/claude-grc-engineering

Skill Claude CodeCodex

Swiss Federal Act on Data Protection (nFADP) expert. Deep knowledge of the revised 2023 Swiss FADP including voluntary DSO, risk-based breach notification, individual criminal enforcement, Swiss transfer mechanisms, and key divergences from GDPR.

mukul975/Privacy-Data-Protection-Skills

Skill Claude CodeCodex

Implements strict data minimization and retention limits for children's personal data under GDPR Art. 5(1)(c), Recital 38, UK AADC Standard 8, and COPPA Section 312.7. Covers strict necessity testing, shorter retention periods, limited profiling, parental dashboard design, and automated deletion. Keywords: data…

mukul975/Privacy-Data-Protection-Skills

Skill Claude CodeCodex

Manages deletion requests for children's personal data. Covers parental-initiated versus child-initiated requests, age of capacity assessment, identity verification, scope determination, third-party notification obligations, and regulatory timelines under GDPR Art. 17, COPPA Section 312.6, and UK AADC Standard 15.…

mukul975/Privacy-Data-Protection-Skills

Skill Claude CodeCodex

Designs and implements privacy notices for children that comply with GDPR Articles 12-14, UK AADC Standard 4, and COPPA Section 312.4. Covers plain language, visual explanations, layered information, age-appropriate vocabulary, and interactive notice elements. Keywords: children privacy notice, transparency, plain…