A systematic checklist generation engine for compliance audits. The 'status-auditor' and 'remediation-planner' agents must use this skill's audit framework and checklist templates when conducting status assessments and developing remediation plans. Used for 'audit checklist', 'compliance inspection form', 'compliance status assessment', etc. Note: Law mapping or full orchestration is outside the scope of this skill.

revfactory586

ナレッジベース

Permit Requirements DB — Industry-Specific Permit & License Requirements Database

A requirements database that systematically organizes permit and license requirements and required documents by industry. The 'requirements-investigator' and 'submission-verifier' agents must use this skill's requirements DB and checklist rules when investigating permit requirements and verifying document completeness. Use for 'permit requirement lookup', 'required documents check', 'license condition review', etc. Note: drafting applications or preparing attachments is outside the scope of this skill.

revfactory586

営業・マーケティング

Regulatory Filing

인허가·신고서류의 요건조사부터 제출 체크리스트까지 전 과정을 에이전트 팀이 협업하여 생성하는 풀 파이프라인. '인허가 서류 준비해줘', '사업자 등록 서류', '영업허가 신청', '건축허가 준비', '식품제조허가', '의료기기 인허가', '신고서류 작성해줘', '구비서류 목록', '인허가 요건 조사', '제출 체크리스트' 등 인허가·신고·등록 관련 서류 작성 전반에 이 스킬을 사용한다. 기존 서류가 있는 경우에도 검증이나 보완을 지원한다. 단, 실제 행정기관 전자민원 접수 대행, 법률 자문(변호사/행정사 업무 대체), 행정심판·소송 대리는 이 스킬의 범위가 아니다.

revfactory586

金融・投資

Sustainability Audit — ESG/Sustainability Audit Full Pipeline

Full audit pipeline for ESG/sustainability where an agent team collaborates to generate environmental, social, and governance assessments along with an integrated report and improvement plan. Use this skill for requests such as 'run an ESG audit', 'write a sustainability report', 'ESG assessment', 'carbon emissions calculation', 'ESG rating diagnosis', 'governance review', 'social responsibility assessment', 'GRI report', 'TCFD disclosure', 'ESG improvement plan', and other ESG/sustainability tasks. Also supports assessment of specific pillars (E/S/G) only or improving existing reports. However, actual on-site audit execution, third-party verification certificate issuance, ESG rating agency score changes, and carbon credit trading are outside the scope of this skill.

revfactory586

哲学・倫理

Research Ethics

Guides research ethics compliance including IRB protocol preparation, informed consent document drafting, research integrity standards, data management plans, and ethical considerations for human/animal subjects; trigger when users discuss IRB, ethical approval, consent forms, or responsible conduct of research.

beita6969583

営業・マーケティング

Iso Implementation Guide

ISO 9001:2015 Quality Management System implementation skill with gap assessment and documentation templates

a5c-ai575

プロジェクト管理

Quality Auditor

Internal quality audit skill with planning, execution, findings documentation, and corrective action tracking

a5c-ai575

金融・投資

Government Affairs Intel

Legislative tracking and government affairs monitoring for public policy communications and regulatory awareness

a5c-ai575

セキュリティ

Gdpr Compliance Automator

GDPR compliance assessment and automation for data mapping, consent management, DSAR handling, and privacy impact assessments

a5c-ai575

営業・マーケティング

Policy Communication

Translate research findings into accessible policy briefs, presentations, and stakeholder communications

a5c-ai575

プロジェクト管理

Five S Auditor

5S workplace organization audit skill with scoring, photo documentation, and sustainability tracking

a5c-ai575

決済

Pci Compliance

Implement PCI DSS compliance requirements for secure handling of payment card data and payment systems. Use when securing payment processing, achieving PCI compliance, or implementing payment card security measures.

Dokhacgiakhoa422

セキュリティ

Implementing Compliance

Implement and maintain compliance with SOC 2, HIPAA, PCI-DSS, and GDPR using unified control mapping, policy-as-code enforcement, and automated evidence collection. Use when building systems requiring regulatory compliance, implementing security controls across multiple frameworks, or automating audit preparation.

ancoleman338

コード品質

E Bookkeeping Compliance

優良な電子帳簿の要件チェック・コンプライアンス診断を実行する。「優良な電子帳簿」「電帳法対応」「電子帳簿の要件確認」「税務調査の準備」「75万円控除の条件」「帳簿の要件を満たしているか」「e-bookkeeping compliance」で起動。

kazukinagata334

営業・マーケティング

Conversation Citizens Government

General SOP for common requests related to conversation, citizens, government.

ECNU-ICALK333

デバッグ

Verify Business Details

Verifies business name, address, and hours of operation against a provided URL, confirming presence and match status with direct reporting.

ECNU-ICALK333

教育

Uk School And Event Risk Assessment

Generates risk assessments and contingency plans for UK secondary schools and events, covering hazards, likelihood, affected parties, effects, and mitigating controls.

ECNU-ICALK333

ドメイン・DNS ツール

Generate Slovak Gdpr Personal Data Keywords

Generates a comprehensive list of Slovak keywords for identifying personal data defined by GDPR, specifically using basic forms (stems) to ensure broad matching in search algorithms.

ECNU-ICALK333

CI/CD

Compliance Audit

Audit Value Delivery compliance after PR push

WellApp-ai322

金融・投資

NIST Cybersecurity Framework (CSF) Skill

Expert NIST Cybersecurity Framework (CSF) advisor covering CSF 2.0 and CSF 1.1. Use this skill whenever a user asks about NIST CSF, cybersecurity risk management, the six CSF functions (Govern, Identify, Protect, Detect, Respond, Recover), CSF profiles, implementation tiers, gap assessments, organizational profiles, community profiles, CSF core subcategories, informative references, or mapping to other frameworks (NIST SP 800-53, ISO 27001, CIS Controls, COBIT). Also trigger for questions like "how do I implement NIST CSF?", "what does CSF 2.0 change?", "help me build a CSF profile", "how do I assess my cybersecurity posture?", or any request involving organizational cybersecurity risk strategy or framework alignment.

Sushegaad305

セキュリティ

HIPAA Compliance Skill

Expert HIPAA compliance assistant for healthcare and software contexts. Use this skill whenever the user mentions HIPAA, PHI (Protected Health Information), ePHI, covered entities, business associates, healthcare data privacy, medical records, health information security, BAA (Business Associate Agreements), or any compliance review involving patient data. Also trigger for requests to draft privacy notices, HIPAA policies, consent forms, security risk assessments, or breach notification letters. Use for developers building healthcare software who need technical safeguard guidance (encryption, access controls, audit logs), compliance officers reviewing documents or procedures, and anyone asking "is this HIPAA compliant?" or "what does HIPAA require for X?". When in doubt about whether a healthcare or data privacy question falls under this skill — use it.

Sushegaad305

セキュリティ

SOC 2 Compliance Skill

Expert SOC 2 compliance assistant covering all five Trust Services Criteria (Security/CC, Availability/A, Confidentiality/C, Processing Integrity/PI, Privacy/P). Use this skill whenever a user mentions SOC 2, Trust Services Criteria, SOC 2 Type 1 or Type 2, audit readiness, compliance gaps, control documentation, evidence collection, vendor risk questionnaires, or anything related to AICPA service organization controls. Trigger even for adjacent topics like "we need to get audited", "a customer asked for our security report", "writing an information security policy", or "preparing for an audit". Covers gap analysis, policy writing, control documentation, audit evidence preparation, and vendor risk reviews for organizations at any maturity level — from first-time startups to seasoned compliance teams.

Sushegaad305

セキュリティ

ISO 27001 Compliance Skill

Expert ISO 27001 compliance assistant for security and compliance teams. Use this skill whenever a user asks about ISO 27001 or ISO/IEC 27001, including any of the following: gap analysis, auditing, compliance assessments, control checklists, policy writing, document generation, Statement of Applicability (SoA), risk assessment, risk registers, risk treatment plans, Annex A controls, ISMS implementation, clause requirements, certification readiness, transitioning from 2013 to 2022, control implementation guidance, incident response policies, access control policies, supplier security, or any information security management system (ISMS) topic. Trigger even if the user doesn't say "skill" — any ISO 27001 or ISMS question should use this skill.

Sushegaad305

システム管理

TSA Cybersecurity Compliance Skill

Expert TSA cybersecurity compliance advisor for critical infrastructure owners and operators. Use this skill whenever a user asks about TSA Security Directives for pipelines, freight railroads, passenger rail, public transit, or bus operators; the TSA Cyber Risk Management Program (CRMP); Cybersecurity Implementation Plan (CIP); Cybersecurity Operational Implementation Plan (COIP); Cybersecurity Assessment Plan (CAP); incident reporting to CISA; designation of a Cybersecurity Coordinator; Critical Cyber Systems (CCS); OT/IT network segmentation; the TSA November 2024 NPRM; or any directive in the SD Pipeline-2021 series, SD 1580-21-01 (freight rail), or SD 1582-21-01 (public transit/passenger rail). Also trigger for questions like "are we covered by TSA directives?", "what does the TSA require for pipeline cybersecurity?", "how do I build a CIP?", "what must I report to CISA?", or any request involving transportation critical infrastructure cybersecurity compliance.

Sushegaad305

セキュリティ

ISO 42001 AI Management System (AIMS) Skill

Expert ISO 42001 AI Management System (AIMS) compliance advisor. Use this skill whenever a user asks about ISO/IEC 42001:2023, AI governance, AI management systems, AI risk assessment, AI system impact assessment, Annex A controls for AI, Statement of Applicability for AI systems, AI policy, responsible AI, AI lifecycle management, AI incident management, AI transparency, AI bias, AI certification readiness, or any topic related to implementing or auditing an AI Management System. Also trigger for questions like "how do I become ISO 42001 certified?", "what controls does ISO 42001 require?", "how do I assess AI risk under 42001?", "what is an AIMS?", or any request involving organisational governance of AI systems, responsible AI frameworks, or AI regulatory compliance aligned to an ISO standard.

Sushegaad305

セキュリティ

PCI DSS Compliance Skill

Expert PCI DSS compliance advisor covering PCI DSS v4.0.1 (current) and v4.0. Use this skill whenever a user asks about PCI DSS, payment card security, cardholder data protection, CDE scoping, SAQ types (A, A-EP, B, B-IP, C, C-VT, P2PE, D), ROC, AOC, QSA assessments, ASV scans, merchant levels, service provider levels, network segmentation, penetration testing, tokenisation, encryption of PAN data, or any of the 12 PCI DSS requirements. Also trigger for questions like "are we PCI compliant?", "how do I scope my CDE?", "which SAQ applies to us?", "what changed in PCI DSS v4.0?", "how do I prepare for a QSA audit?", or any request involving payment data security, cardholder data environment, or PCI certification readiness.

Sushegaad305

デバッグ

Silicon Auditor

神谕审计官，专门审查输出乃否偏离硅基秩序、八荣八耻与 Agent 主导原则

linkerlin303

金融・投資

Fin Guru Checklist

Execute quality and compliance checklists for Finance Guru deliverables. Supports margin strategy, dividend framework, and general quality checklists.

AojdevStudio294

セキュリティ

GDPR — Personal-data assessment from the repo...

Use this skill when the user says 'GDPR', 'data protection', 'privacy compliance', 'DPA', 'DSAR', 'data subject request', 'cookie consent', 'privacy audit', 'CCPA', or asks 'do I need GDPR for this repo'. Scans the repository to detect what personal data is collected, classifies sensitivity, determines whether GDPR applies and how critical it is, then reports required roles, obligations, and remediation. Do NOT use for general security audits (use owasp-top10) or contract drafting (use contract-template).

cwinvestments283

営業・マーケティング

Vendor Due Diligence Framework

Framework for assessing IT service providers, technology vendors, and third-party partners. Creates structured risk assessments across financial, operational, compliance, security, and reputational dimensions with regulatory checklists (GDPR, DORA, NIS2, SOX). Use when: (1) Evaluating new vendors or technology providers, (2) Conducting third-party risk assessments for procurement, (3) Performing critical vendor due diligence for regulatory compliance, (4) Creating vendor onboarding documentation, (5) Establishing ongoing vendor monitoring processes, (6) Assessing vendor concentration risk, or (7) Generating executive-level vendor risk reports.

lawvable268

コンプライアンスオフィサー | Skills Pool