A regulatory compliance collection for MedTech, covering ISO standards, FDA requirements, and quality system documentation.

Install

mkdir -p .claude/skills/ra-qm-skills && curl -L -o skill.zip "https://agentskills.codes/api/skills/download/3456" && unzip -o skill.zip -d .claude/skills/ra-qm-skills && rm skill.zip

Installs to .claude/skills/ra-qm-skills

Activation

This is the description your AI agent reads to decide when to run this skill — the better it matches your request, the more reliably it fires.

Router/index for the 15 regulatory & quality-management skills bundled in this plugin (ISO 13485 QMS, EU MDR 2017/745, FDA submissions under QMSR, ISO 14971 risk, CAPA, document control, ISO 27001/ISMS, ISO 42001 AIMS, EU AI Act, GDPR/DSGVO, SOC 2, auditing). Use when a compliance request doesn't obviously match one skill and you need to pick the right one (e.g., 'prepare us for an ISO 13485 audit', 'is my AI system high-risk under the AI Act').
449 chars✓ has a “when” triggerlonger than Claude Code's old 250-char listing cap (fine on current versions)
Advanced

Key capabilities

  • Route compliance requests
  • Identify regulatory skills
  • Support ISO 13485 QMS
  • Manage FDA submission planning
  • Facilitate audit preparation

How it works

Acts as a router for 15 specialized regulatory and quality management skills, matching user requests to the appropriate skill folder based on defined signals.

Inputs & outputs

You give it
Regulatory or quality management request
You get back
Routed skill path

When to use ra-qm-skills

  • ISO 13485 compliance
  • FDA 510(k) documentation
  • Manage CAPA workflows
  • GDPR compliance checks

About this skill

Regulatory Affairs & Quality Management Skills — Router

This plugin bundles 15 compliance skills for HealthTech/MedTech organizations (this router is the 16th folder under ra-qm-team/skills/). Each skill is self-contained.

Routing table

Match the request, then load ra-qm-team/skills/<skill>/SKILL.md. If multiple rows match, ask one clarifying question first.

Request signalsSkillPath
Regulatory strategy, pathway selection, submissions planningregulatory-affairs-headskills/regulatory-affairs-head/
Management review, quality KPIs, QMR governancequality-manager-qmrskills/quality-manager-qmr/
ISO 13485 QMS implementation, process controlquality-manager-qms-iso13485skills/quality-manager-qms-iso13485/
ISO 14971 risk analysis, FMEA, risk filesrisk-management-specialistskills/risk-management-specialist/
Root cause analysis, corrective/preventive actionscapa-officerskills/capa-officer/
Document control, 21 CFR Part 11, DHF/DMR/DHRquality-documentation-managerskills/quality-documentation-manager/
ISO 13485 internal audits, NC classificationqms-audit-expertskills/qms-audit-expert/
ISO 27001 audit planning and executionisms-audit-expertskills/isms-audit-expert/
ISMS design, security risk assessmentinformation-security-manager-iso27001skills/information-security-manager-iso27001/
EU MDR classification, technical files, PSURmdr-745-specialistskills/mdr-745-specialist/
FDA 510(k)/PMA/De Novo, QMSRfda-consultant-specialistskills/fda-consultant-specialist/
GDPR/DSGVO, DPIA, data subject rightsgdpr-dsgvo-expertskills/gdpr-dsgvo-expert/
EU AI Act risk classification, obligationseu-ai-act-specialistskills/eu-ai-act-specialist/
ISO/IEC 42001 AI management systemiso42001-specialistskills/iso42001-specialist/
SOC 2 Type I/II readiness, trust criteriasoc2-complianceskills/soc2-compliance/

Quick start

# Example: route a risk-analysis request
cat ra-qm-team/skills/risk-management-specialist/SKILL.md
python3 ra-qm-team/skills/risk-management-specialist/scripts/risk_matrix_calculator.py --help

Rules

  • Route to exactly one skill, then follow that skill's workflow. This router ships no tools of its own.
  • All outputs are decision support: final compliance determinations route to the named human owner (QMR, DPO, regulatory counsel) — never auto-decide.
  • Verify regulatory citations against the current text (e.g., FDA QMSR effective 2026-02-02 replaced the legacy QSR subsections).

When not to use it

  • Directly making final compliance determinations
  • Executing compliance tasks without routing

Prerequisites

Python 3 environment

Limitations

  • Does not ship tools of its own
  • Requires human owner for final compliance determinations

How it compares

Provides a centralized routing mechanism for a suite of specialized compliance tools rather than attempting to handle all domains in one tool.

Compared to similar skills

ra-qm-skills side by side with the closest alternatives in the catalog.

SkillInstallsUpdatedSafetyDifficulty
ra-qm-skills (this skill)12moReviewAdvanced
fda-medtech-compliance-auditor03moNo flagsAdvanced
security-requirement-extraction72moNo flagsIntermediate
gdpr-dsgvo-expert87moReviewAdvanced

Try saying

Example prompts that trigger this skill in your AI assistant.

More by alirezarezvani

View all by alirezarezvani

ma-playbook

alirezarezvani

M&A strategy for acquiring companies or being acquired. Due diligence, valuation, integration, and deal structure. Use when evaluating acquisitions, preparing for acquisition, M&A due diligence, integration planning, or deal negotiation.

39122

ad-creative

alirezarezvani

When the user needs to generate, iterate, or scale ad creative for paid advertising. Use when they say 'write ad copy,' 'generate headlines,' 'create ad variations,' 'bulk creative,' 'iterate on ads,' 'ad copy validation,' 'RSA headlines,' 'Meta ad copy,' 'LinkedIn ad,' or 'creative testing.' This is pure creative production — distinct from paid-ads (campaign strategy). Use ad-creative when you need the copy, not the campaign plan.

3395

content-trend-researcher

alirezarezvani

Advanced content and topic research skill that analyzes trends across Google Analytics, Google Trends, Substack, Medium, Reddit, LinkedIn, X, blogs, podcasts, and YouTube to generate data-driven article outlines based on user intent analysis

30126

cold-email

alirezarezvani

When the user wants to write, improve, or build a sequence of B2B cold outreach emails to prospects who haven't asked to hear from them. Use when the user mentions 'cold email,' 'cold outreach,' 'prospecting emails,' 'SDR emails,' 'sales emails,' 'first touch email,' 'follow-up sequence,' or 'email prospecting.' Also use when they share an email draft that sounds too sales-y and needs to be humanized. Distinct from email-sequence (lifecycle/nurture to opted-in subscribers) — this is unsolicited outreach to new prospects. NOT for lifecycle emails, newsletters, or drip campaigns (use email-sequence).

2971

content-humanizer

alirezarezvani

Makes AI-generated content sound genuinely human — not just cleaned up, but alive. Use when content feels robotic, uses too many AI clichés, lacks personality, or reads like it was written by committee. Triggers: 'this sounds like AI', 'make it more human', 'add personality', 'it feels generic', 'sounds robotic', 'fix AI writing', 'inject our voice'. NOT for initial content creation (use content-production). NOT for SEO optimization (use content-production Mode 3).

2251

aws-solution-architect

alirezarezvani

Design AWS architectures for startups using serverless patterns and IaC templates. Use when asked to design serverless architecture, create CloudFormation templates, optimize AWS costs, set up CI/CD pipelines, or migrate to AWS. Covers Lambda, API Gateway, DynamoDB, ECS, Aurora, and cost optimization.

2047

You might also like

fda-medtech-compliance-auditor

TJSNDHU

Expert AI auditor for Medical Device (SaMD) compliance, IEC 62304, and 21 CFR Part 820. Reviews DHFs, technical files, and software validation.

00

security-requirement-extraction

wshobson

Derive security requirements from threat models and business context. Use when translating threats into actionable requirements, creating security user stories, or building security test cases.

759

gdpr-dsgvo-expert

davila7

Senior GDPR/DSGVO expert and internal/external auditor for data protection compliance. Provides EU GDPR and German DSGVO expertise, privacy impact assessments, data protection auditing, and compliance verification. Use for GDPR compliance assessments, privacy audits, data protection planning, and regulatory compliance verification.

831

data-privacy-compliance

davila7

Data privacy and regulatory compliance specialist for GDPR, CCPA, HIPAA, and international data protection laws. Use when implementing privacy controls, conducting data protection impact assessments, ensuring regulatory compliance, or managing data subject rights. Expert in consent management, data minimization, and privacy-by-design principles.

418

audit-support

anthropics

Support SOX 404 compliance with control testing methodology, sample selection, and documentation standards. Use when generating testing workpapers, selecting audit samples, classifying control deficiencies, or preparing for internal or external audits.

412

awesome-game-security-overview

gmh5225

Guide for understanding and contributing to the awesome-game-security curated resource list. Use this skill when adding new resources, organizing categories, understanding project structure, or maintaining the README.md format consistency.

49

Search skills

Search the agent skills registry