Skills tagged: compliance

• aws-security-audit - Perform security posture assessments on AWS environments

  awssecurityauditcompliance

  ★ 8 · Updated 2026-09-22

  Performs security posture assessments of AWS environments using AWS CLI to identify vulnerabilities and misconfigurations.

  ⚙ Audit IAM security configurations⚙ Audit network security settings⚙ Inspect data encryption status
• agent-owasp-compliance - Evaluate AI agent codebases for OWASP ASI compliance.

  owaspasisecurity-auditcompliance

  ★ 7 · Updated 2026-09-22

  Evaluates AI agent codebases against OWASP Agentic Security Initiative Top 10 risks and generates gap-focused compliance reports.

  ⚙ Evaluate AI agent codebases⚙ Map controls to ASI risks⚙ Run agentic security audits
• dora-readiness-reviewer - Review DORA readiness and ICT auditability.

  doraict-riskresilience-testingauditability

  ★ 1 · Updated 2026-09-22

  Reviews DORA readiness for ICT risk management, resilience testing, incident procedures, third-party risk, roles, policies, evidence, and auditability.

  ⚙ Identify DORA readiness review boundaries⚙ Compare artifacts against expected evidence⚙ Separate confirmed gaps from assumptions
• anwalt-de - German IT Law and GDPR Assistant

  it-lawgdprcompliancelegal-analysis

  ★ 26 · Updated 2026-09-21

  Provides initial assessments on German and EU IT law, GDPR, privacy, contracts, site notices, cookies, NIS2, and EU AI Act.

  ⚙ Analyze legal documents and compliance⚙ Assess IT law facts⚙ Ask targeted clarification questions
• hr-pro - HR subagent for hiring, onboarding, PTO, and HR policies.

  hrrecruitingonboardingpto

  ★ 3 · Updated 2026-09-21

  Provides HR guidance, templates, and workflows for hiring, onboarding, offboarding, leave management, performance, employee relations, and policy drafting.

  ⚙ Draft job descriptions⚙ Create structured interview kits⚙ Generate onboarding and offboarding plans
• cncf-volcano-engine-member-reviewer - Review Volcano Engine under CNCF Gold category.

  cncfvolcano-enginecode-reviewdevsecops

  ★ 2 · Updated 2026-09-21

  Review Volcano Engine using official documentation and repository in the CNCF Members Gold category.

  ⚙ Review Volcano Engine CNCF membership⚙ Verify cloud native claims⚙ Assess security and compliance
• hr-gap-detection - Detect gaps, blockers, and risks in onboarding cases.

  hronboardinggap-detectionaudit

  ★ 0 · Updated 2026-09-21

  Compares onboarding readiness packets against checklists to identify missing documents, blockers, and policy-sensitive risks.

  ⚙ Read onboarding case data⚙ Compare readiness packets with checklists⚙ Detect missing documents and blockers
• spdx-sbom - Generate SPDX 2.3 JSON Software Bill of Materials

  spdxsbomcompliancedependency-inventory

  ★ 12 · Updated 2026-09-20

  Generates SPDX 2.3 standard JSON Software Bill of Materials from project dependency manifests for compliance and vulnerability analysis.

  ⚙ Define component identity and context⚙ Parse project dependency manifests⚙ Map package metadata to SPDX fields
• implementing-gdpr-data-protection-controls - Implement GDPR technical and organizational controls.

  compliancegovernancegdprprivacy

  ★ 5 · Updated 2026-09-20

  Implements GDPR technical and organizational measures, DPIAs, data subject rights management, breach notification, and cross-border data transfers.

  ⚙ Implement GDPR technical security measures⚙ Conduct Data Protection Impact Assessments⚙ Manage data subject rights requests
• bergung-fremder-weltraumgegenstaende-fundrecht-und-voe - Recovery of Foreign Space Objects: Property & Space Law

  space lawrecovery of space objectslaw of finderspublic international law

  ★ 0 · Updated 2026-09-20

  Examines deadlines, jurisdiction, legal remedies, and immediate measures for recovering foreign space objects under international and finder's space law.

  ⚙ Examine deadlines and urgent risks⚙ Verify governing legal norms⚙ Determine competent authorities and addressees
• deepgram-security-basics - Deepgram Security Basics

  saasdeepgramapisecurity

  ★ 17 · Updated 2026-09-20

  Apply Deepgram security best practices for API key management and data protection.

  ⚙ Create scoped API keys⚙ Enable PII redaction⚙ Generate temporary client keys
• compliance-cl - Chilean compliance engine for data protection and crime law

  compliancechiledata-protectionley-21719

  ★ 192 · Updated 2026-09-20

  Audits code repositories and generates compliance documentation for Chilean Law 21.719 (data protection) and Law 21.595 (economic crimes).

  ⚙ Audit code repositories for compliance⚙ Evaluate legal compliance controls⚙ Resolve legal compliance decisions
• risk-analysis - Clause-by-Clause Contract Risk Analysis

  legalcontractsriskanalysis

  ★ 1 · Updated 2026-09-19

  Performs deep clause-by-clause contract risk scoring across ten categories with poison pill detection and financial exposure estimation.

  ⚙ Extract material contract clauses⚙ Score clauses across ten categories⚙ Detect hidden poison pills
• corporate-brand-guidelines - Corporate Brand Guidelines Skill

  brandingdocument-formattingdesign-standardscompliance

  ★ 1 · Updated 2026-09-19

  Applies corporate branding standards to documents ensuring colors, fonts, layouts, and messaging align with brand guidelines.

  ⚙ Apply corporate brand formatting⚙ Validate document brand compliance⚙ Generate compliance reports
• compliance-ops - Interview-driven compliance guardrails for Claude Code

  compliancehipaasoc2gdpr

  ★ 46 · Updated 2026-09-18

  Provides an interview-driven framework to design systems safely according to HIPAA, SOC 2, GDPR, and PCI-DSS compliance rules before building.

  ⚙ Interview users on compliance requirements⚙ Audit existing builds for compliance gaps⚙ Generate data-flow maps
• ciso-advisor - Security leadership for growth-stage companies.

  cisosecurity-strategyrisk-quantificationcompliance

  ★ 0 · Updated 2026-09-18

  Provides risk quantification, compliance roadmapping, security architecture strategy, and incident response leadership.

  ⚙ Quantify security risks in dollars⚙ Sequence compliance roadmaps⚙ Develop security architecture strategy
• compliance-testing - Regulatory Compliance Testing

  compliancegdprhipaapci-dss

  ★ 1 · Updated 2026-09-17

  Executes regulatory compliance testing for GDPR, CCPA, HIPAA, SOC2, PCI-DSS, and industry-specific regulations.

  ⚙ Identify applicable regulations⚙ Map requirements to testable controls⚙ Test data subject rights
• firewall-review - Vendor-agnostic firewall ruleset audit playbook

  firewall-auditstatic-analysiscompliancenetwork-security

  ★ 3 · Updated 2026-09-17

  Performs static analysis on multi-vendor firewall configs using 17 detectors and compliance frameworks to generate audit reports and remediation trackers.

  ⚙ Sniff vendor configuration files⚙ Parse multi-vendor firewall rules⚙ Run 17 rule quality detectors
• performing-kubernetes-cis-benchmark-with-kube-bench - Perform Kubernetes CIS Benchmark Audits with kube-bench

  kube-benchcis-benchmarkkubernetescompliance

  ★ 4 · Updated 2026-09-17

  Audit Kubernetes cluster security posture against CIS benchmarks using kube-bench across control plane, etcd, worker nodes, and policies.

  ⚙ Run full cluster benchmark checks⚙ Audit control plane and etcd⚙ Audit worker nodes and RBAC
• email-marketing - Create email campaigns, drip sequences, and deliverability.

  email-marketingmarketingnewsletterdrip-campaign

  ★ 3 · Updated 2026-09-17

  Creates email campaigns, automation sequences, and deliverability optimization covering drip campaigns, newsletters, onboarding, and compliance.

  ⚙ Create email campaigns⚙ Design automation sequences⚙ Optimize email deliverability

Scroll to load more