SE

security-compliance-compliance-check

Get expert guidance on implementing controls for GDPR, HIPAA, SOC2, and PCI-DSS compliance.

Install

mkdir -p .claude/skills/security-compliance-compliance-check && curl -L -o skill.zip "https://agentskills.codes/api/skills/download/5232" && unzip -o skill.zip -d .claude/skills/security-compliance-compliance-check && rm skill.zip

Installs to .claude/skills/security-compliance-compliance-check

Activation

This is the description your AI agent reads to decide when to run this skill — the better it matches your request, the more reliably it fires.

You are a compliance expert specializing in regulatory requirements for software systems including GDPR, HIPAA, SOC2, PCI-DSS, and other industry standards. Perform comprehensive compliance audits and provide implementation guidance for achieving and maintaining compliance.
274 charsno explicit “when” triggerlonger than Claude Code's old 250-char listing cap (fine on current versions)
Advanced

Key capabilities

  • Assesses compliance readiness for GDPR, HIPAA, SOC2, and PCI-DSS
  • Builds control checklists and audit evidence
  • Designs compliance monitoring and reporting systems
  • Provides implementation guidance for technical controls

How it works

It evaluates system configurations against regulatory requirements and provides actionable steps for compliance implementation.

Inputs & outputs

You give it
Regulatory standard and system context
You get back
Compliance assessment and implementation plan

When to use security-compliance-compliance-check

  • Assess GDPR compliance readiness
  • Build a SOC2 control checklist
  • Design audit trail logs for PCI-DSS
  • Check HIPAA implementation gaps

About this skill

Regulatory Compliance Check

You are a compliance expert specializing in regulatory requirements for software systems including GDPR, HIPAA, SOC2, PCI-DSS, and other industry standards. Perform comprehensive compliance audits and provide implementation guidance for achieving and maintaining compliance.

Use this skill when

  • Assessing compliance readiness for GDPR, HIPAA, SOC2, or PCI-DSS
  • Building control checklists and audit evidence
  • Designing compliance monitoring and reporting

Do not use this skill when

  • You need legal counsel or formal certification
  • You do not have scope approval or access to required evidence
  • You only need a one-off security scan

Context

The user needs to ensure their application meets regulatory requirements and industry standards. Focus on practical implementation of compliance controls, automated monitoring, and audit trail generation.

Requirements

$ARGUMENTS

Instructions

  • Clarify goals, constraints, and required inputs.
  • Apply relevant best practices and validate outcomes.
  • Provide actionable steps and verification.
  • If detailed examples are required, open resources/implementation-playbook.md.

Safety

  • Avoid claiming compliance without a formal audit.
  • Protect sensitive data and limit access to audit artifacts.

Output Format

  1. Compliance Assessment: Current compliance status across all applicable regulations
  2. Gap Analysis: Specific areas needing attention with severity ratings
  3. Implementation Plan: Prioritized roadmap for achieving compliance
  4. Technical Controls: Code implementations for required controls
  5. Policy Templates: Privacy policies, consent forms, and notices
  6. Audit Procedures: Scripts for continuous compliance monitoring
  7. Documentation: Required records and evidence for auditors
  8. Training Materials: Workforce compliance training resources

Focus on practical implementation that balances compliance requirements with business operations and user experience.

Resources

  • resources/implementation-playbook.md for detailed patterns and examples.

Limitations

  • Use this skill only when the task clearly matches the scope described above.
  • Do not treat the output as a substitute for environment-specific validation, testing, or expert review.
  • Stop and ask for clarification if required inputs, permissions, safety boundaries, or success criteria are missing.

When not to use it

  • When legal counsel or formal certification is required
  • When scope approval or evidence access is missing
  • When only a one-off security scan is needed

Prerequisites

Scope approvalAccess to audit evidence

Limitations

  • Not a substitute for formal audit or expert review
  • Requires clear scope and input data

How it compares

It provides a structured compliance roadmap and technical control implementation rather than just a security scan.

Compared to similar skills

security-compliance-compliance-check side by side with the closest alternatives in the catalog.

SkillInstallsUpdatedSafetyDifficulty
security-compliance-compliance-check (this skill)34moNo flagsAdvanced
security-requirement-extraction72moNo flagsIntermediate
audit-support45moNo flagsAdvanced
awesome-game-security-overview44moReviewBeginner

Try saying

Example prompts that trigger this skill in your AI assistant.

mobile-design

sickn33

Mobile-first design and engineering doctrine for iOS and Android apps. Covers touch interaction, performance, platform conventions, offline behavior, and mobile-specific decision-making. Teaches principles and constraints, not fixed layouts. Use for React Native, Flutter, or native mobile apps.

149231

unity-developer

sickn33

Build Unity games with optimized C# scripts, efficient rendering, and proper asset management. Masters Unity 6 LTS, URP/HDRP pipelines, and cross-platform deployment. Handles gameplay systems, UI implementation, and platform optimization. Use PROACTIVELY for Unity performance issues, game mechanics, or cross-platform builds.

142357

architect-review

sickn33

Master software architect specializing in modern architecture patterns, clean architecture, microservices, event-driven systems, and DDD. Reviews system designs and code changes for architectural integrity, scalability, and maintainability. Use PROACTIVELY for architectural decisions.

109320

angular

sickn33

Modern Angular (v20+) expert with deep knowledge of Signals, Standalone Components, Zoneless applications, SSR/Hydration, and reactive patterns. Use PROACTIVELY for Angular development, component architecture, state management, performance optimization, and migration to modern patterns.

100129

frontend-slides

sickn33

Create stunning, animation-rich HTML presentations from scratch or by converting PowerPoint files. Use when the user wants to build a presentation, convert a PPT/PPTX to web, or create slides for a talk/pitch. Helps non-designers discover their aesthetic through visual exploration rather than abstract choices.

95195

minecraft-bukkit-pro

sickn33

Master Minecraft server plugin development with Bukkit, Spigot, and Paper APIs. Specializes in event-driven architecture, command systems, world manipulation, player management, and performance optimization. Use PROACTIVELY for plugin architecture, gameplay mechanics, server-side features, or cross-version compatibility.

9078

You might also like

security-requirement-extraction

wshobson

Derive security requirements from threat models and business context. Use when translating threats into actionable requirements, creating security user stories, or building security test cases.

759

audit-support

anthropics

Support SOX 404 compliance with control testing methodology, sample selection, and documentation standards. Use when generating testing workpapers, selecting audit samples, classifying control deficiencies, or preparing for internal or external audits.

412

awesome-game-security-overview

gmh5225

Guide for understanding and contributing to the awesome-game-security curated resource list. Use this skill when adding new resources, organizing categories, understanding project structure, or maintaining the README.md format consistency.

49

audit-prep-assistant

trailofbits

Prepares codebases for security review using Trail of Bits' checklist. Helps set review goals, runs static analysis tools, increases test coverage, removes dead code, ensures accessibility, and generates documentation (flowcharts, user stories, inline comments).

15

ra-qm-skills

alirezarezvani

12 production-ready regulatory affairs and quality management skills for HealthTech/MedTech: ISO 13485 QMS, MDR 2017/745, FDA 510(k)/PMA, ISO 27001 ISMS, GDPR/DSGVO compliance, risk management (ISO 14971), CAPA, document control, and internal auditing. Python tools included (all stdlib-only). Works with Claude Code, Codex CLI, and OpenClaw.

13

audit-extractor

Layr-Labs

Extract findings from PDF audit reports and convert them to a markdown checklist. Use when the user asks to process an audit report, extract audit findings, or create an audit action items list. (project)

01

Search skills

Search the agent skills registry