Agent skill · product strategy · alirezarezvani
compliance-os
Use when running several compliance frameworks at once: which apply, where controls overlap, a mock audit or one evidence checklist. Runs framework_selector.py, cross_framework_mapper.py, audit_simulator.py and evidence_pool_generator.py.
Why this skill is useful
Adds 4 executable Python scripts for compliance framework orchestration that automate complex decision-making processes not easily inferred by the AI.
What it needs
Requires python installed locally. About 6k tokens when loaded. Last updated 2026-08-05. 23,939 stars on the source repository.
What this skill does
Compliance OS — Meta-Orchestrator Multi-framework compliance program orchestration. Four decisions, no per-framework deep-dive: 1. Which frameworks apply to this company? — frameworkselector.py ranks the 12 supported frameworks against a company profile (industry, geography, AI use, medical, financial, headcount, customers, healthcare-PHI, NIS2 essential/important entity, US gov contractor) and returns applicable ones with dependency graph 2. How much do selected frameworks overlap? — crossframeworkmapper.py computes control-level overlap with confidence rating; outputs unified control matrix + evidence-reuse opportunities 3. What does a mock audit produce? — auditsimulator.py generates 8–15 finding scenarios with severity distribution matching IIA expectations + interview questions per control 4. What's the unified evidence checklist? — evidencepoolgenerator.py consolidates evidence across enabled frameworks; outputs which artefact satisfies which controls across which frameworks This skill is NOT a per-framework deep-dive. The per-framework skills (${CLAUDEPLUGINROOT}/vendor/ra-qm-team/iso42001-specialist/, compliance-team-eu-ai-act/, ${CLAUDEPLUGINROOT}/vendor/ra-qm-team/gdpr-dsgvo-expert/, etc.) do the operational work. Compliance OS orchestrates them. This skill is NOT a substitute for binding legal advice. Cross-framework mappings reflect published guidance (ISO standards, regulations, EDPB/Commission guidance, IIA / AICPA professional standards). Novel cross-walks should be reviewed with counsel. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills alirezarezvani/compliance-os