claws

Assess a codebase or app for ISO/IEC 27001:2022 readiness — detect technical security evidence, map it to Annex A controls, status each control (implemented/partial/missing/N-A), and produce an SoA-style gap report grounded in the standard's structure. Covers the ISMS clauses (4–10), the 93 Annex A controls in 4 themes, the 11 new 2022 controls, certification & the Statement of Applicability, risk assessment/treatment, and the 2024 climate amendment. A readiness aide, not a certification or legal/audit advice. Grounding pack current to 22 June 2026.

Assess whether a codebase or app complies with the EU AI Act (Regulation (EU) 2024/1689) — detect AI usage, classify the risk tier, determine provider/deployer role, map obligations, and produce a grounded, citation-backed gap report. Grounding pack current to 22 June 2026.

Apply the EU GDPR (Regulation (EU) 2016/679) and the German DSGVO/BDSG + TTDSG/TDDDG to real compliance work, grounded in the regulation rather than memory. Covers data-subject rights (Art. 12–22), records of processing/ROPA (Art. 30), data protection impact assessments/DPIA (Art. 35), processors and DPA/AVV (Art. 28), international transfers and SCCs (Art. 44–49), consent and cookie/ePrivacy rules (Art. 6/7 + TTDSG/TDDDG §25), personal-data breach notification (Art. 33/34), and security of processing (Art. 32). Cite the article, run the deadline-bound workflows, and draft ROPA/DPIA/DPA/privacy-notice/consent records from bundled templates. A structured compliance aide, not legal advice.

Use Langfuse for LLM observability and evaluation and look up Langfuse documentation. In HybridClaw, data access (traces, observations, sessions, scores, prompts, datasets, metrics) goes through the gateway-proxied langfuse.cjs helper with SecretRef auth — reads are green, writes are grant-gated. Documentation retrieval uses langfuse.com llms.txt, markdown pages, and search-docs. Covers instrumentation, prompt migration, error analysis, and LLM-as-a-judge calibration.

Read and operate Hetzner Cloud servers, server types, locations, networks, volumes, snapshots, and cost estimates through gateway-proxied API requests.

Read and manage Hetzner DNS zones and records through gateway-proxied DNS API requests with guarded A, AAAA, CNAME, and TXT changes.

Read and operate Hetzner Storage Boxes through Hetzner API management calls and WebDAV file requests with gateway-injected credentials.

Use this skill when the task needs a custom D3.js survey visualization or story experience that standard BI tools or Plotly cannot express well, including bespoke interaction models, scrollytelling, dense crosstab explorers, custom benchmarks, animated trend narratives, or highly tailored web-native survey dashboards.

Use this skill when the task is to design, build, or explain Plotly-based survey dashboards, charts, or apps in Python or JavaScript, including interactive Likert charts, crosstab comparisons, trend tracking, benchmark views, HTML exports, Dash prototypes, and survey-specific hover, annotation, and denominator logic.

Use this skill when the task is to design, spec, troubleshoot, or explain a Power BI dashboard for survey data, including Power Query shaping, semantic modeling, DAX measures, slicers, drillthrough, bookmarks, weighted survey metrics, top-box or bottom-box summaries, net scores, and wave or benchmark comparisons.

Use this skill when the task is to design a survey, review questionnaire wording, define answer options or skip logic, plan crosstabs, choose weighting or denominator rules, interpret trends across waves, write topline insights, or create an analysis brief before building a dashboard in Tableau, Power BI, Plotly, or D3.

Use this skill when the task is to design, spec, troubleshoot, or explain a Tableau dashboard for survey or questionnaire data, including worksheets, dashboards, filters, parameters, LOD calculations, table calculations, crosstabs, weighted metrics, top-box or bottom-box summaries, net scores, and wave comparisons.