compliance plugins

by FlowStudio

Debug, build, manage, and govern Power Automate cloud flows via FlowStudio MCP. Five skills for diagnostics, deployment, tenant-wide monitoring, and compliance metadata.

by Raishin

Cloud and zero-trust agentic workflow marketplace for skills, agents, rules, MCP references, and compliance-aware architecture.

by Mondoo, Inc.

cnspec agent skills for MQL development and policy navigation

by Mondoo, Inc.

MQL query development with syntax guidance, platform-specific patterns, and MCP tool integration

by Mondoo, Inc.

Navigate cnspec policy bundles using graph commands for LLMs

by adityaraj0421

A virtual design team for Claude Code, Cursor, Windsurf, Gemini CLI, and Copilot — powered by Naksha. Assembles specialist roles — UI designer, UX researcher, content designer, Figma expert, data viz, email, social, motion, presentation, brand strategy, illustration, video, conversational, spatial, compliance, and more — for any design task. 26 roles, 63 commands, 15,000+ lines of expert design knowledge. Your agency's design brain, inside your terminal.

by Joel Lewis

US securities regulatory guidance for broker-dealers and investment advisers. Covers FINRA, SEC, ERISA, FinCEN, and CFA Institute GIPS requirements. Guidance-only — no Python scripts.

by Ross Young

Agentic-Security: SAST + SCA + secrets + IaC + LLM-sec scanner with deterministic fix toolchain. Exposes a Model Context Protocol (MCP) server with 17 tools that Codex CLI can call directly.

by Legal Skills Contributors

Chinese legal workflow skills for AI agents: consultation, litigation, criminal defense, labor disputes, bankruptcy, contracts, compliance, legal drafting, and document export.

by Flow Studio

Debug, build, manage, and govern Power Automate cloud flows via FlowStudio MCP. Five skills for diagnostics, deployment, tenant-wide monitoring, and compliance metadata.

by VincentChuWaiChow

Curated marketplace for cloud and zero-trust AI workflows. 331 agents, 286 skills, and rules across AWS, Azure, OCI, GCP, Alibaba Cloud, Huawei Cloud, Kubernetes, and Terraform.

by VincentChuWaiChow

Cloud and zero-trust agentic workflow marketplace for skills, agents, rules, MCP references, and compliance-aware architecture.

by Sven Roth

Generate audit-ready compliance documentation from Shipwright pipeline data (RTM, test evidence, change history, SBOM)

by Matt Corbett

Cannabis Operations specialist team — agents (cannabis-engagement-lead, seed-to-sale-compliance-specialist, dispensary-retail-operations-specialist, cannabis-finance-analyst), skills, templates, commands, an advisory hook, best-practice rules, and a research-grounded knowledge bank. A compliance-and-retail-operations team for a licensed cannabis operator — it runs seed-to-sale traceability against the state track-and-trace system (Metrc/BioTrack/LeafData), manages the 280E tax burden that makes COGS allocation existential, runs dispensary retail on margin and basket, and reads a ~$45B U.S. market where the rules change at the state line. Inherits ravenclaude-core protocols.

by Matt Corbett

Cybersecurity governance, risk & compliance (GRC) team — agents (grc-architect, control-and-evidence-engineer, audit-and-third-party-risk-lead) for the security-compliance program layer: framework selection & scoping (SOC 2 TSC, ISO 27001 + Annex A, NIST CSF 2.0, NIST 800-53), the ISMS, control crosswalk across frameworks, the Statement of Applicability; control implementation & operating effectiveness, policy authoring, evidence collection & continuous control monitoring, Type I vs Type II readiness; audit readiness, gap assessments, and vendor/third-party risk (TPRM tiering, SIG/CAIQ, shared-responsibility, monitoring). Decision-tree bank (Mermaid trees), best-practices, skills, commands, templates, a hook, a grc_calc.py risk/coverage/readiness calculator, scenarios. Seams: AppSec -> security-engineering; financial-regulator -> regulatory-compliance; privacy mechanics -> data-governance-privacy; cloud config -> aws/azure/gcp-cloud. Requires ravenclaude-core@>=0.7.0.

by Synapti AI

Evidence-first project documentation system. Produces an audit-ready 23-file package for technical due diligence, engineering and product onboarding, and partner or customer communication — every material claim traced to a ledger row and a claim state, three context-isolated verification passes, and a binary release gate. Ships a post-merge GitHub Actions job that keeps the package current by opening a documentation PR. Requires bash, git and jq; on Windows, Git Bash (see docs/windows-support.md).

by AxonFlow

Policy enforcement, PII detection, and audit trails for Claude Code. Govern tool execution, scan outputs for sensitive data, and maintain compliance-grade records of every action.

by Artience

Cowork-optimized build of Artibot — marketing, content, data, design, CRO/SEO, long-form writing, Claude Design, Routines, Ultraplan, Monitor, and swarm intelligence for knowledge workers

by Sungjun Lee

법순이 — 한국 법령/판례 조사, 계약서 검토, 컴플라이언스 체크를 돕는 법무 어시스턴트

by George Shanidze

George Shanidze's agent skills — a growing collection covering software engineering, mobile release engineering, and app store publishing. See the individual skill descriptions for what's actually in here today.

by myCareer

Turn a career into a verified record, then render resumes, LinkedIn profiles, and executive letters from it. A recognition harness reconstructs what you actually did at autobiography depth; a validator refuses to let any document claim more than the evidence supports.

by Roman

Multi-repo agent orchestration with ownership enforcement, structured communication, and compliance-ready audit trails

by Dtwo

Manage Dtwo gateways, policies, and Rego with the Dtwo MCP server.

by AltByte

SEA personal-data-protection compliance guidance for engineers modifying code that touches personal data — Singapore PDPA, Thailand PDPA, Indonesia UU PDP, Malaysia PDPA, and Philippines Data Privacy Act.