compliance AI Agent Skills

gdpr-consent-manager

376

A5c Ai Babysitter Gdpr Consent Manager

Implement GDPR-compliant consent management for desktop applications

audit

241

MadAppGang

On-demand security and code quality audit. Use when checking for vulnerabilities, security issues, code smells, or compliance problems. Trigger keywords - "audit", "security check", "vulnerability scan", "code quality", "compliance", "security audit".

compliance-testing

215

proffesor-for-testing

Regulatory compliance testing for GDPR, CCPA, HIPAA, SOC2, PCI-DSS and industry-specific regulations. Use when ensuring legal compliance, preparing for audits, or handling sensitive data.

qe-compliance-testing

215

proffesor-for-testing

Regulatory compliance testing for GDPR, CCPA, HIPAA, SOC2, PCI-DSS and industry-specific regulations. Use when ensuring legal compliance, preparing for audits, or handling sensitive data.

Specification Compliance Testing

71

PramodDutta

Testing implementations against formal specifications including RFC compliance, protocol adherence, and standards conformance verification.

PCI-DSS Compliance Testing

71

PramodDutta

Testing PCI-DSS compliance for payment processing including encryption validation, access control testing, and secure data storage verification.

License Compliance Testing

71

PramodDutta

Automated open-source license compliance testing to detect license conflicts, copyleft violations, and license compatibility issues in dependencies.

Infrastructure Drift Detection

71

PramodDutta

Detecting and testing infrastructure drift between desired state and actual state using automated scanning, alerting, and remediation patterns.

HIPAA Compliance Testing

71

PramodDutta

Testing HIPAA compliance for healthcare applications including PHI handling, audit logging, access controls, and data encryption verification.

GDPR Compliance Testing

71

PramodDutta

Testing GDPR compliance requirements including data deletion, consent management, data portability, right to erasure, and privacy policy enforcement.

SOC 2 Compliance Testing

71

PramodDutta

Testing SOC 2 compliance controls including security monitoring, change management, access reviews, and incident response procedures.

Compliance-as-Code Testing

71

PramodDutta

Automated compliance testing using Open Policy Agent, Chef InSpec, and custom policy engines for security baseline validation.

policy-opa

64

AgentSecOps

Policy-as-code enforcement and compliance validation using Open Policy Agent (OPA). Use when: (1) Enforcing security and compliance policies across infrastructure and applications, (2) Validating Kubernetes admission control policies, (3) Implementing policy-as-code for compliance frameworks (SOC2, PCI-DSS, GDPR, HIPAA), (4) Testing and evaluating OPA Rego policies, (5) Integrating policy checks into CI/CD pipelines, (6) Auditing configuration drift against organizational security standards, (7) Implementing least-privilege access controls.

iac-checkov

64

AgentSecOps

Infrastructure as Code (IaC) security scanning using Checkov with 750+ built-in policies for Terraform, CloudFormation, Kubernetes, Dockerfile, and ARM templates. Use when: (1) Scanning IaC files for security misconfigurations and compliance violations, (2) Validating cloud infrastructure against CIS, PCI-DSS, HIPAA, and SOC2 benchmarks, (3) Detecting secrets and hardcoded credentials in IaC, (4) Implementing policy-as-code in CI/CD pipelines, (5) Generating compliance reports with remediation guidance for cloud security posture management.

hipaa-compliance

43

curiositech

Ensure HIPAA compliance when handling PHI (Protected Health Information). Use when writing code that accesses user health data, check-ins, journal entries, or any sensitive information. Activates for audit logging, data access, security events, and compliance questions.

event_driven

39

vuralserhat86

Structure systems around asynchronous, event-based communication to decouple producers and consumers for improved scalability and resilience. Use when building loosely coupled systems with asynchronous message-based communication.

cache_patterns

39

vuralserhat86

Instruction set for enabling and operating the Spring Cache abstraction in Spring Boot when implementing application-level caching for performance-sensitive workloads.

marketing-geo-localization

34

vasilyu1983

International marketing localization - regional platforms, cultural adaptation, compliance frameworks, and multi-market GTM strategies

forensic-data-engineer

17

daffy0208

Expert in data forensics, anomaly detection, audit trail analysis, fraud detection, and breach investigation

lease-compliance-auditor

9

reggiechan74

Expert in lease compliance monitoring and obligation tracking. Use when auditing insurance requirements, verifying environmental compliance, checking use clause adherence, or monitoring covenant compliance. Key terms include insurance audit, CGL requirements, environmental compliance, use clause violations, covenant breach, notice requirements, cure periods

security-checklist

8

ArieGoldkin

Use this skill when implementing security measures or conducting security audits. Provides OWASP Top 10 mitigations, authentication patterns, input validation strategies, and compliance guidelines. Ensures applications are secure against common vulnerabilities.

security-auditor

7

louloulin

Security vulnerability detection and remediation expert for applications and infrastructure

aws-security-audit

4

ngxtm

Comprehensive AWS security posture assessment using AWS CLI and security best practices

aws-compliance-checker

4

ngxtm

Automated compliance checking against CIS, PCI-DSS, HIPAA, and SOC 2 benchmarks

None

2

mukul975

Conduct systematic access reviews and certifications to ensure users have appropriate access rights aligned with their roles. This skill covers review campaign design, reviewer selection, risk-based p

implementing-aws-security-hub-compliance

2

mukul975

Implementing AWS Security Hub to aggregate security findings across AWS accounts, enable compliance standards like CIS AWS Foundations and PCI DSS, configure automated remediation with EventBridge and Lambda, and create custom security insights for organizational risk management.

implementing-pci-dss-compliance-controls

2

mukul975

PCI DSS 4.0.1 establishes 12 requirements across 6 control objectives for organizations that store, process, or transmit cardholder data. With PCI DSS 3.2.1 retiring April 2024 and 51 new requirements

performing-privileged-account-access-review

2

mukul975

Conduct systematic reviews of privileged accounts to validate access rights, identify excessive permissions, and enforce least privilege across PAM infrastructure.

implementing-cloud-security-posture-management

2

mukul975

Implementing Cloud Security Posture Management (CSPM) to continuously monitor multi-cloud environments for misconfigurations, compliance violations, and security risks using Prowler, ScoutSuite, AWS Security Hub, Azure Defender, and GCP Security Command Center.

performing-access-recertification-with-saviynt

2

mukul975

Configure and execute access recertification campaigns in Saviynt Enterprise Identity Cloud to validate user entitlements, revoke excessive access, and maintain compliance with SOX, SOC2, and HIPAA.

performing-soc-2-type-ii-audit-preparation

2

mukul975

SOC 2 Type II audit preparation involves designing, implementing, and demonstrating the operational effectiveness of controls aligned to the AICPA Trust Services Criteria (TSC) over a defined audit pe

building-vulnerability-aging-and-sla-tracking

2

mukul975

Implement a vulnerability aging dashboard and SLA tracking system to measure remediation performance against severity-based timelines and drive accountability.

performing-kubernetes-cis-benchmark-with-kube-bench

2

mukul975

Audit Kubernetes cluster security posture against CIS benchmarks using kube-bench with automated checks for control plane, worker nodes, and RBAC.

security-essentials-pack

2

organvm-iv-taxis

Curated bundle of essential security skills for building secure applications. Includes threat modeling, hardening guides, audit checklists, compliance frameworks, and contract analysis. Use when establishing security practices for a project.

performing-cryptographic-audit-of-application

2

mukul975

A cryptographic audit systematically reviews an application's use of cryptographic primitives, protocols, and key management to identify vulnerabilities such as weak algorithms, insecure modes, hardco

implementing-gdpr-data-protection-controls

2

mukul975

The General Data Protection Regulation (EU) 2016/679 (GDPR) is the EU's comprehensive data protection law governing the collection, processing, storage, and transfer of personal data. This skill cover

implementing-nerc-cip-compliance-controls

2

mukul975

This skill covers implementing North American Electric Reliability Corporation Critical Infrastructure Protection (NERC CIP) compliance controls for Bulk Electric System (BES) cyber systems. It addresses asset categorization (CIP-002), electronic security perimeters (CIP-005), system security management (CIP-007), configuration management (CIP-010), supply chain risk management (CIP-013), and the 2025 updates including mandatory MFA for remote access and expanded low-impact asset requirements.

implementing-gcp-organization-policy-constraints

2

mukul975

Implement GCP Organization Policy constraints to enforce security guardrails across the entire resource hierarchy, restricting risky configurations and ensuring compliance at organization, folder, and project levels.

implementing-aws-config-rules-for-compliance

2

mukul975

Implementing AWS Config rules for continuous compliance monitoring of AWS resources, deploying managed and custom rules aligned to CIS and PCI DSS frameworks, configuring automatic remediation with SSM Automation, and aggregating compliance data across accounts.

implementing-aws-macie-for-data-classification

2

mukul975

Implement Amazon Macie to automatically discover, classify, and protect sensitive data in S3 buckets using machine learning and pattern matching for PII, financial data, and credentials detection.

implementing-iso-27001-information-security-management

2

mukul975

ISO/IEC 27001:2022 is the international standard for establishing, implementing, maintaining, and continually improving an Information Security Management System (ISMS). This skill covers the complete

implementing-vulnerability-sla-breach-alerting

2

mukul975

Build automated alerting for vulnerability remediation SLA breaches with severity-based timelines, escalation workflows, and compliance reporting dashboards.

sovereign-governance

1

fratilanico

Sovereign artifact governance for multi-repo AI agent ecosystems. One AGENTS.md to rule them all — enforces single source of truth, pointer-based sync, state file standards, skills deduplication, and cross-repo compliance. Use when creating repos, auditing governance, resolving AGENTS.md conflicts, or onboarding new agents.

Japan Invoice

1

hanabi-jpn

Japan Invoice Agent — a Claude Code skill supporting Japan's Invoice System (Qualified Invoices). It centralizes qualified-invoice creation, registration-number verification, consumption-tax calculation, and input-tax credit management.

audit-evidence

danielshue

Generate change logs, diff controlled documents, and build audit-ready evidence packs.

argus-intelligence

sooyoon-eth

Blockchain intelligence & AI security. Token analysis, address risk, smart money tracking, AML compliance, and prompt injection detection. Free tier (3/day, 1-min cooldown). Pay-per-query via x402 or Stripe credits.

token-launch-checklist

ZhouXiaoHong

Comprehensive pre-launch checklist for token/coin deployment covering smart contract, tokenomics, compliance, and go-to-market readiness.