scriptoriumadmin/claude-skills
1
0
Fork 0
mirror of https://github.com/alirezarezvani/claude-skills.git synced 2026-08-28 04:24:58 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions
claude-skills/compliance-os
History
Claude 7405298b4b
fix: resolve the actionable reported issues (#954, #949, #933, #931, #969, #968, #924, #885) 
- #954: strip non-spec source/attribution keys from all 39 plugin.json
  manifests so Claude Code's validator accepts them; metadata preserved in
  new .claude-plugin/authoring-notes.json sidecars; check_plugin_json.py now
  hard-fails manifests carrying those keys and sanity-checks the sidecar;
  CLAUDE.md ClawHub schema section updated to the new rule.
- #949: move the c-level-agents plugin out of c-level-advisor/ to a
  top-level directory so the two marketplace sources no longer overlap;
  updated marketplace.json source, homepage, descriptions, all
  cross-references, docs, harness manifest, mirror-tree symlinks/indexes,
  and rebased the moved files' relative links; domain counters trued up
  (18 -> 19 domains).
- #933: replace dead links to the gitignored maintainer-local megaprompts/
  tree with annotated plain-text references (44 files: SKILL.md, READMEs,
  agents, commands).
- #931: DynamoDB on-demand pricing updated to post-Nov-2024 rates
  ($0.625/M writes, $0.125/M strongly consistent reads).
- #969: skill_security_auditor.py and the three dossier scripts reconfigure
  stdout/stderr to UTF-8 (errors=replace) so legacy Windows codepages no
  longer crash at print time; PYTHONUTF8=1 documented.
- #968: Windows Notes section in INSTALLATION.md + README pointer for the
  core.symlinks mirror-tree checkout caveat.
- #924/#885 residuals: hook commands quote "${CLAUDE_PLUGIN_ROOT}" paths in
  all plugin hooks.json/settings.json (space-safe roots); removed the stale
  pre-rename status/review mirror symlinks and index entries left over from
  the memory-status/memory-review rename.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Qgc6RYXWJPr5oW9DHU7zR4
2026-08-21 05:47:37 +00:00
..
.claude-plugin chore(versioning,docs): normalize stale versions to 2.9.0 + refresh counts 2026-05-27 05:22:59 +00:00
agents fix: resolve the actionable reported issues (#954, #949, #933, #931, #969, #968, #924, #885) 2026-08-21 05:47:37 +00:00
skills fix: phantom-path sweep — 888 unresolvable references to zero 2026-06-10 14:33:00 +00:00
README.md feat(compliance-os): multi-framework meta-orchestrator for compliance teams 2026-05-13 17:48:33 +00:00

README.md

compliance-os

Compliance OS — a meta-orchestrator for multi-framework compliance programs. Configure which frameworks apply; compute overlap; simulate audits; consolidate evidence across frameworks.

What this is

Most compliance teams run multiple frameworks in parallel: ISO 27001 + SOC 2 for security, ISO 13485 + FDA QSR for medical devices, ISO 42001 + EU AI Act for AI, GDPR + sector privacy law for personal data. Each framework lives in its own skill (we have 14 existing ra-qm-team skills + 2 new compliance-team-* plugins for ISO 42001 and EU AI Act).

But teams need:

  1. A way to configure which of the 9 frameworks apply per company profile
  2. Cross-framework overlap — many controls are the same across frameworks; one piece of evidence often satisfies multiple
  3. Audit simulation — practice internal audits before the real ones
  4. Unified evidence pool — collect evidence once, satisfy multiple frameworks

Compliance OS provides exactly that. Four stdlib Python tools + 4 in-depth references + 3 cs-* personas + 3 /cs:* commands.

Supported frameworks (9)

ID Framework Companion skill
ISO 27001 Info security ISMS ra-qm-team/skills/information-security-manager-iso27001/ + isms-audit-expert/
ISO 13485 Medical device QMS ra-qm-team/skills/quality-manager-qms-iso13485/ + qms-audit-expert/
ISO 42001 AI Management System ra-qm-team/skills/iso42001-specialist/ (new)
ISO 14971 Medical device risk mgmt ra-qm-team/skills/risk-management-specialist/
EU AI Act Regulation (EU) 2024/1689 ra-qm-team/skills/eu-ai-act-specialist/ (new)
EU MDR 745 Medical device regulation ra-qm-team/skills/mdr-745-specialist/
GDPR Data protection ra-qm-team/skills/gdpr-dsgvo-expert/
SOC 2 Trust services criteria ra-qm-team/skills/soc2-compliance/
FDA QSR 21 CFR 820 ra-qm-team/skills/fda-consultant-specialist/

Quick start

# Configure which frameworks apply for your company
python skills/compliance-os/scripts/framework_selector.py

# Compute overlap between selected frameworks
python skills/compliance-os/scripts/cross_framework_mapper.py

# Simulate an internal audit
python skills/compliance-os/scripts/audit_simulator.py

# Generate unified evidence checklist
python skills/compliance-os/scripts/evidence_pool_generator.py

All four tools run with embedded samples if no JSON is provided. All use stdlib only.

Slash commands

Command Purpose
/cs:compliance-readiness 6-question forcing interrogation for compliance program readiness
/cs:aims-audit 6-question forcing interrogation specific to ISO 42001 internal audit
/cs:ai-act-readiness 6-question forcing interrogation specific to EU AI Act compliance

cs-* persona agents

Agent Voice
cs-compliance-officer Multi-framework orchestrator. "Which frameworks apply, and where do they overlap?"
cs-aims-iso42001 AIMS implementation operator. "What's the gap against Clauses 4-10?"
cs-ai-act-compliance EU AI Act Article-cited operator. "What's the risk tier per Article 6?"

What this is NOT

  • NOT executive AI/risk strategy. For board-level AI / data / risk decisions, see c-level-advisor/.
  • NOT a replacement for the per-framework skills. This orchestrates them. The per-framework skills do the deep work.
  • NOT a binding legal opinion. Cross-framework mappings reflect published guidance; novel cases need outside counsel.

License

MIT.