Skills tagged compliance: 17 agent skills for Claude Code

• aws-cleanrooms — Troubleshoots and debugs AWS Clean Rooms collaboration issues related to IAM roles, S3 bucket policies, KMS keys, Lake Formation permissions.
• aws-iam — Provides verified corrections for IAM behaviors that AI agents frequently get wrong — policy evaluation edge cases, trust policy gotchas, STS session limits.
• aws-security — Covers AWS security services and workflows — Security Hub V2 (OCSF) findings, connectors, aggregators, automation rules, and security posture summaries.
• creating-secrets-using-best-practices — Creates and manages secrets in AWS Secrets Manager following security best practices.
• github-sensitive-data-cleanup — Scan and remove sensitive data (secrets, API keys, private domains/IPs, PII) from GitHub repository history.
• hardware-compliance — Reference knowledge base on EU hardware/IoT cybersecurity law.
• privacy-policy — Draft a detailed privacy policy covering data types, jurisdiction, GDPR and compliance considerations, and clauses needing legal review.
• review-plugin-submission — Audit a Cursor plugin for marketplace readiness. Use when validating manifests, component metadata, discovery paths, and submission quality before publishing.
• secure-code-guardian — Use when implementing authentication/authorization, securing user input.
• securing-s3-buckets — Create and secure S3 buckets following AWS best practices for access control, encryption, monitoring, and remediation of misconfigurations.
• security-reviewer — Identifies security vulnerabilities, generates structured audit reports with severity ratings, and provides actionable remediation guidance.
• sendcutsend — Review DXF and STEP/STP uploads for SendCutSend.com orders using its ordering guide, catalog.
• setting-up-cloudtrail-multi-region — Enables a multi-region AWS CloudTrail trail with S3 log storage, CloudWatch Logs integration.
• sms — When the user wants to plan, build, or optimize SMS or MMS marketing — including welcome flows, abandoned cart texts, post-purchase, win-back.
• supply-chain-risk-auditor — Audits a project's dependencies for supply-chain risk: version-matched advisories for direct dependencies and the full lockfile tree.
• vulnerability-triage-brocards — This skill should be used when the user asks to "triage a vulnerability report", "assess a CVE", "evaluate a bug bounty submission".
• X Money guide — Read this before the first X Money action in a session and again on any X Money error, refusal, or missing capability.