Back to Skills

compliance

majiayu000
Updated Yesterday
58
9
58
View on GitHub
Designdesign

About

This skill helps developers implement and verify compliance with major regulatory frameworks like GDPR, HIPAA, PCI-DSS, and SOC2. It provides key requirements and controls for each standard, using file operations to analyze and apply necessary safeguards. Use it when building or auditing systems that handle sensitive personal, health, or financial data.

Quick Install

Claude Code

Recommended
Plugin CommandRecommended
/plugin add https://github.com/majiayu000/claude-skill-registry
Git CloneAlternative
git clone https://github.com/majiayu000/claude-skill-registry.git ~/.claude/skills/compliance

Copy and paste this command in Claude Code to install this skill

Documentation

Compliance

Common Frameworks

GDPR (General Data Protection Regulation)

EU data protection regulation.

Key Requirements:

  • Lawful basis for processing
  • Data minimization
  • Right to erasure
  • Data portability
  • Breach notification (72 hours)
  • Privacy by design

HIPAA (Health Insurance Portability and Accountability Act)

US healthcare data protection.

Key Requirements:

  • Access controls
  • Audit controls
  • Integrity controls
  • Transmission security
  • Business Associate Agreements

PCI-DSS (Payment Card Industry Data Security Standard)

Payment card data protection.

Key Requirements:

  • Network segmentation
  • Encryption of cardholder data
  • Access restrictions
  • Regular testing
  • Security policies

SOC 2 (Service Organization Control 2)

Trust service criteria.

Principles:

  • Security
  • Availability
  • Processing Integrity
  • Confidentiality
  • Privacy

Common Controls

Access Control

- [ ] Unique user IDs
- [ ] Strong authentication
- [ ] Role-based access
- [ ] Regular access reviews
- [ ] Termination procedures

Data Protection

- [ ] Encryption at rest
- [ ] Encryption in transit
- [ ] Key management
- [ ] Data classification
- [ ] Retention policies

Audit & Monitoring

- [ ] Audit logging enabled
- [ ] Log retention (1+ year)
- [ ] Regular log review
- [ ] Alerting on anomalies
- [ ] Incident response plan

Documentation

- [ ] Security policies
- [ ] Procedures documented
- [ ] Evidence collection
- [ ] Regular reviews
- [ ] Training records

Compliance Checklist

ControlGDPRHIPAAPCISOC2
EncryptionYesYesYesYes
Access ControlYesYesYesYes
Audit LoggingYesYesYesYes
Breach NotificationYesYesYesYes
Risk AssessmentYesYesYesYes

GitHub Repository

majiayu000/claude-skill-registry
Path: skills/compliance

Related Skills

content-collections

Meta

This skill provides a production-tested setup for Content Collections, a TypeScript-first tool that transforms Markdown/MDX files into type-safe data collections with Zod validation. Use it when building blogs, documentation sites, or content-heavy Vite + React applications to ensure type safety and automatic content validation. It covers everything from Vite plugin configuration and MDX compilation to deployment optimization and schema validation.

View skill

creating-opencode-plugins

Meta

This skill provides the structure and API specifications for creating OpenCode plugins that hook into 25+ event types like commands, files, and LSP operations. It offers implementation patterns for JavaScript/TypeScript modules that intercept and extend the AI assistant's lifecycle. Use it when you need to build event-driven plugins for monitoring, custom handling, or extending OpenCode's capabilities.

View skill

langchain

Meta

LangChain is a framework for building LLM applications using agents, chains, and RAG pipelines. It supports multiple LLM providers, offers 500+ integrations, and includes features like tool calling and memory management. Use it for rapid prototyping and deploying production systems like chatbots, autonomous agents, and question-answering services.

View skill

Algorithmic Art Generation

Meta

This skill helps developers create algorithmic art using p5.js, focusing on generative art, computational aesthetics, and interactive visualizations. It automatically activates for topics like "generative art" or "p5.js visualization" and guides you through creating unique algorithms with features like seeded randomness, flow fields, and particle systems. Use it when you need to build reproducible, code-driven artistic patterns.

View skill