CSlawyer1985
CSlawyer1985/legal-skillhub
Codex 또는 Claude로 설치 이 Prompt를 복사해 Codex, Claude 또는 다른 어시스턴트에 붙여 넣으면 Skill 페이지를 검토하고 설치를 진행할 수 있습니다.
직접 명령은 검토 Prompt를 거치지 않습니다. 실행하기 전에 소스를 확인하세요.
npx skills add https://github.com/CSlawyer1985/legal-skillhub --skill compliance-os명령은 한 줄로 유지됩니다. 복사하기 전에 가로로 스크롤해 전체 내용을 확인하세요.
로컬 사본을 원하시나요? SkillsMP에서 현재 제공할 수 있는 파일을 다운로드하세요.
88查企业风险查询与分析工具 —— 专注于中国大陆企业的法务风险查询与分析，覆盖经营异常、行政处罚、监管措施、被执行人、失信被执行人、司法案件等风险类型。支持公司名称、统一社会信用代码、companyId 三种输入方式，自动完成风险查询并输出结构化风险分析总结。 触发场景：仅当用户意图为查询企业风险/法务风险时触发。包括但不限于：企业风险查询、公司风险、经营异常、行政处罚、监管措施、被执行人、失信被执行人、司法风险、风险扫描、风险评估、企业合规审查、风险报告、XX公司有什么风险、XX公司安全吗、XX公司有没有处罚、XX公司被执行过吗。 不触发场景：纯粹的企业信息查询（如查公司、搜企业、工商信息、注册资本、法人代表、股东结构、专利商标等）不应触发本技能，请使用其他 cha88 系列工具。
Manages Rule 30(b)(6) corporate representative deposition workflows — drafting notice topics with reasonable particularity, building examination outlines, defending designees, handling objections, and preserving binding admissions for summary judgment or trial. Use when drafting or responding to 30(b)(6) notices, selecting and preparing designees, building topic-by-topic outlines, or triaging scope and privilege disputes. Trigger keywords: 30(b)(6), corporate representative deposition, topic list, designee, notice analysis, deposition objections, corporate admissions.
Guides taking and defending Rule 30(b)(6) corporate representative depositions. Drafts topic lists with reasonable particularity, builds examination outlines for binding corporate admissions, analyzes noticed topics for objections, and prepares designees. Use when drafting 30(b)(6) notices, preparing corporate deposition topics, selecting or preparing designees, or defending corporate representative depositions.
SOC 직업 분류 기준
SKILL.md 표시 중
| name | compliance-os |
| slug | compliance-os |
| version | 1.0.0 |
| displayName | compliance-os |
| description | compliance-os专用技能，帮助AI Agent高效完成相关任务。 |
| summary | compliance-os专用技能，帮助AI Agent高效完成相关任务。 |
| license | MIT |
| category | compliance-os |
| framework | ["Claude Code","Codex","Hermes Agent","OpenClaw","QClaw","WorkBuddy"] |
| platform | multi-platform |
| homepage | https://github.com/1991513ccie-png |
| repository | https://github.com/1991513ccie-png |
Multi-framework compliance program orchestration. Four decisions, no per-framework deep-dive:
framework_selector.py ranks the 12 supported frameworks against a company profile (industry, geography, AI use, medical, financial, headcount, customers, healthcare-PHI, NIS2 essential/important entity, US gov contractor) and returns applicable ones with dependency graphcross_framework_mapper.py computes control-level overlap with confidence rating; outputs unified control matrix + evidence-reuse opportunitiesaudit_simulator.py generates 8–15 finding scenarios with severity distribution matching IIA expectations + interview questions per controlevidence_pool_generator.py consolidates evidence across enabled frameworks; outputs which artefact satisfies which controls across which frameworksThis skill is NOT a per-framework deep-dive. The per-framework skills (ra-qm-team/skills/iso42001-specialist/, compliance-team-eu-ai-act/, ra-qm-team/skills/gdpr-dsgvo-expert/, etc.) do the operational work. Compliance OS orchestrates them.
This skill is NOT a substitute for binding legal advice. Cross-framework mappings reflect published guidance (ISO standards, regulations, EDPB/Commission guidance, IIA / AICPA professional standards). Novel cross-walks should be reviewed with counsel.
compliance orchestration, multi-framework compliance, compliance OS, cross-framework mapping, control overlap, evidence pool, evidence reuse, audit simulation, mock audit, internal audit programme, GRC, governance risk compliance, framework selector, compliance program, integrated compliance, ISO 19011, IIA IPPF, AICPA AT-C, NIST CSF profile, multi-cert program, SOC 2 + ISO 27001, ISO 27001 + ISO 42001, ISO 13485 + MDR 745, AI Act + ISO 42001, GDPR + ISO 27001, compliance officer, compliance team workflow, certification readiness
# Decision A: Which frameworks apply for the company?
python scripts/framework_selector.py # embedded mid-stage AI SaaS sample
python scripts/framework_selector.py path/to/profile.json
# Decision B: Compute cross-framework overlap
python scripts/cross_framework_mapper.py
python scripts/cross_framework_mapper.py path/to/control_libs.json
python scripts/audit_simulator.py
python scripts/audit_simulator.py path/to/audit_scope.json
python scripts/evidence_pool_generator.py
python scripts/evidence_pool_generator.py path/to/program.json
framework_selector.py with your profile.evidence_pool_generator.py to surface the reuse opportunities.The framework: company-profile JSON in → applicable-framework list out with dependency graph.
Deterministic logic:
Run framework_selector.py to apply the decision rules.
The framework: for each selected framework, parse its control library; compute overlap with other selected frameworks.
Per merged-control output:
Densest known overlap: ISO 27001 Annex A ↔ SOC 2 Trust Services Criteria — historically ~75% control coverage shared. Adding ISO 42001 brings AI-specific controls; adding GDPR brings privacy-specific.
Run cross_framework_mapper.py with framework control libraries.
The framework: generate a realistic mock internal audit per ISO 19011 + IIA IPPF standards.
Per audit output:
Run audit_simulator.py with framework + scope.
The framework: consolidate evidence requirements across enabled frameworks; identify reuse opportunities.
Output:
Run evidence_pool_generator.py with program config.
Goal: stand up a compliance program covering 2–4 frameworks simultaneously.
# 1. Run framework selector with company profile
python scripts/framework_selector.py profile.json
# 2. For each applicable framework, identify the per-framework skill and run its gap analysis
# 3. Run cross-framework mapper to identify reuse opportunities
python scripts/cross_framework_mapper.py control_libs.json
# 4. Run evidence pool generator to consolidate
python scripts/evidence_pool_generator.py program.json
# 5. Cross-check with cs-compliance-officer agent
# 6. Output: prioritized program backlog with owners + dates
Goal: plan internal audit cycles covering all applicable frameworks.
# 1. Refresh framework selector if profile changed
python scripts/framework_selector.py profile.json
# 2. For each framework, run its internal-audit-plan tool
# (e.g., aims_audit_scheduler.py for ISO 42001; isms_audit_scheduler.py for ISO 27001)
# 3. Coordinate the audit calendar across frameworks (auditor independence + capacity)
# 4. Run audit simulator for each framework to prep auditors
python scripts/audit_simulator.py scope.json
# 5. Output: integrated audit calendar with owners + auditor assignments
Goal: prepare for an external certification audit.
# 1. Run gap analysis for the new framework
# (ISO 42001: aims_gap_analyzer.py; ISO 27001: compliance_checker.py; SOC 2: gap_analyzer.py)
# 2. Run cross-framework mapper against already-certified frameworks
python scripts/cross_framework_mapper.py control_libs.json
# 3. Reuse evidence for HIGH-confidence mappings; build new for MEDIUM/LOW
# 4. Run audit simulator to dry-run the certification audit
python scripts/audit_simulator.py scope.json
# 5. Close remaining gaps before external auditor stage 1
Goal: keep the unified evidence pool fresh + reusable.
# 1. Refresh evidence pool generator
python scripts/evidence_pool_generator.py program.json
# 2. Identify HIGH-reuse-leverage artefacts (1 evidence -> 5+ controls)
# 3. Confirm evidence freshness (within retention requirement per framework)
# 4. Audit the evidence pool itself (no orphan controls, no stale evidence)
**Bottom Line:** [one sentence — what's the multi-framework picture + biggest reuse opportunity]
**The Decision:** [one of: framework-set | overlap-map | audit-plan | evidence-consolidation]
**The Evidence:** [framework names + control IDs from the tool, not adjectives]
**How to Act:** [3 concrete next steps with owners + dates]
**Your Decision:** [the call only the compliance officer can make — which frameworks to pursue, audit cycle priority, evidence-reuse policy]
ra-qm-team/skills/iso42001-specialist/ — ISO 42001 deep-dive (paired with compliance-team-iso42001 plugin)ra-qm-team/skills/eu-ai-act-specialist/ — EU AI Act deep-dive (paired with compliance-team-eu-ai-act plugin)ra-qm-team/skills/information-security-manager-iso27001/ — ISO 27001 ISMS deep-divera-qm-team/skills/quality-manager-qms-iso13485/ — ISO 13485 QMS deep-divera-qm-team/skills/gdpr-dsgvo-expert/ — GDPR deep-divera-qm-team/skills/soc2-compliance/ — SOC 2 deep-divera-qm-team/skills/fda-consultant-specialist/ — FDA QSR deep-divera-qm-team/skills/mdr-745-specialist/ — EU MDR 745 deep-divera-qm-team/skills/risk-management-specialist/ — ISO 14971 deep-divec-level-advisor/chief-ai-officer-advisor/ — Executive AI risk decisions (build-vs-buy, model selection)c-level-advisor/skills/general-counsel-advisor/ — Legal review for novel casescross_framework_mapper.py)assets/mock_audit_library.json — 205 pre-built finding scenarios spanning 12 frameworks + 26 themes + 4 severity levels (34 critical, 88 major, 54 minor, 29 observation). Each scenario tags applicable frameworks; cross-reference scripts/cross_framework_mapper.py merged-controls catalogue to resolve framework-specific control IDs. Use as input to enrich audit_simulator.py mock audits, as a training resource for new internal auditors, or as the seed for finding-pattern detection across multi-framework programmes.
Version: 1.2.0 Status: Production Ready