菜单
Use when gathering all compliance evidence for a certification or audit, preparing documentation for retail buyers or marketplace listings, or bulk-collecting product compliance documents
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
Use when handling any product compliance question across cosmetics, food, electronics, toys, textiles, supplements, medical devices, or any physical product sold internationally — covers substance checks, labeling rules, customs classification, market entry, certifications, and regulatory monitoring across EU, US, UK, Japan, Korea, China, Canada and more
Use when classifying a product under the Harmonized System, assigning an HS / CN / HTS / TN VED code, reconciling tariff nomenclatures across countries, applying the General Rules of Interpretation, requesting a Binding Tariff Information ruling, or resolving a classification that drives duty, dangerous-goods, and restriction outcomes from a part number or product description
Use when selling infant formula (0-6 months), follow-on formula (6-12 months), growing-up milk, toddler milk, specialty formula (hypoallergenic, organic, A2, goat, soy, premature) in any market, navigating EU 609/2013 + 2016/127, FDA 21 CFR 106-107, NMPA registration, WHO Code marketing restrictions, or recall response
Use when selling batteries or battery-powered products, checking obligations under EU Battery Regulation 2023/1542, setting up a battery passport, preparing a carbon footprint declaration, meeting recycled content requirements, conducting supply-chain due diligence for cobalt/lithium/nickel/natural graphite, applying battery labeling (QR, crossed-out wheelie bin, Pb/Cd/Hg symbols), ensuring portable battery removability, shipping lithium batteries under UN 38.3/IATA/IMDG/ADR, or registering for battery EPR in any market
Use when selling connected products, IoT devices, smart home hardware, industrial control systems, or any product with digital elements in EU/UK/US/APAC markets; checking CRA (Cyber Resilience Act) conformity obligations; assessing RED cybersecurity delegated regulation (EU) 2022/30 and EN 18031 harmonised standards; determining SBOM requirements; setting up vulnerability disclosure policies; evaluating NIS2 obligations as a manufacturer; checking UK PSTI Act readiness; verifying IoT security labelling (US Cyber Trust Mark, Singapore CLS, UK IoT label); screening against ETSI EN 303 645 consumer IoT baseline; or mapping IEC 62443 obligations for industrial/OT products
Use when shipping hazardous or dangerous goods, classifying products by UN number or hazard class, choosing between air/sea/road/rail transport for a hazardous material, applying IATA DGR or IMDG Code or ADR or 49 CFR rules, determining packing group, completing a dangerous goods declaration, selecting hazmat labels and marks, shipping lithium batteries (UN 3480/3481/3090/3091), aerosols, flammables, corrosives, dry ice, or any substance regulated under the UN Orange Book modal regimes
| name | evidence-blitz |
| description | Use when gathering all compliance evidence for a certification or audit, preparing documentation for retail buyers or marketplace listings, or bulk-collecting product compliance documents |
Gather all compliance evidence for certification, audit, retail buyer, or marketplace listing. Parallel agents per document category.
mcp__bastion__refresh-compliance-test(complianceIntegrationConfigurationId="<config-id>", testIds=["<test-id-1>", "<test-id-2>"])
# Upload a document
mcp__bastion__upload-compliance-document(name="stability-report-2026.pdf", document="data:application/pdf;base64,...")
# Attach to a test
mcp__bastion__add-compliance-test-evidence(testId="<test-id>", name="Stability report", description="6-month accelerated stability test by SGS", evidenceDocumentId="<doc-id>")
# Mark test ready for review
mcp__bastion__mark-compliance-test-ready-for-review(testId="<test-id>")
mcp__bastion__exclude-compliance-test(testId="<test-id>", comment="Product line discontinued Q1 2026", excludeUntil="2027-01-01")
mcp__bastion__put-compliance-test-exclude-asset(testsToUpdate=[{"testId": "<test-id>", "assetId": "<asset-id>", "comment": "Staging environment -- out of audit scope"}])
digraph {
rankdir=TB; node [shape=box style=rounded fontsize=10];
inventory [label="1. Inventory\nWhat documents exist?\nWhat is missing?" shape=hexagon];
subgraph cluster_agents {
label="2. Parallel Collection (4 agents)"; style=dashed;
safety [label="Agent A:\nProduct Safety Docs"];
labeling [label="Agent B:\nLabeling Compliance"];
substance [label="Agent C:\nSubstance Documentation"];
market [label="Agent D:\nMarket-Specific Certs"];
}
compile [label="3. Compile\nProduct Compliance File" shape=hexagon];
gap [label="4. Gap Report\nWhat is still missing?" shape=hexagon];
inventory -> safety; inventory -> labeling; inventory -> substance; inventory -> market;
safety -> compile; labeling -> compile; substance -> compile; market -> compile;
compile -> gap;
}
Check what exists and what is missing:
DOCUMENT INVENTORY -- [Product Name] -- [Date]
PRODUCT SAFETY:
[ ] Safety assessment / CPSR (cosmetics)
[ ] Risk assessment (general products)
[ ] Stability test report (accelerated)
[ ] Stability test report (real-time)
[ ] Microbiological test report
[ ] Preservative efficacy test (PET/challenge test)
[ ] Patch test / skin irritation test
[ ] SPF test report (if SPF claim)
[ ] EMC test report (electronics)
[ ] Safety test report (LVD, electronics)
[ ] Mechanical/physical safety (toys: EN 71-1)
[ ] Flammability test (toys: EN 71-2)
[ ] Migration test (toys: EN 71-3)
[ ] Nutritional analysis (food)
[ ] Contaminant testing (food)
SUBSTANCE DOCUMENTATION:
[ ] Full ingredients list with CAS numbers
[ ] Certificates of Analysis (CoA) for each raw material
[ ] IFRA certificate (if product contains fragrance)
[ ] Allergen declaration
[ ] REACH compliance documentation
[ ] RoHS compliance documentation (electronics)
[ ] SVHC screening result
[ ] Heavy metals analysis
[ ] CPSIA testing (children's products)
LABELING:
[ ] Label artwork (per market)
[ ] INCI name verification
[ ] Allergen review (per market requirements)
[ ] Claims substantiation file
[ ] Prop 65 assessment (if selling in California)
[ ] Nutrition/supplement facts panel review (food)
MARKET CERTIFICATIONS:
[ ] CE Declaration of Conformity (EU)
[ ] CE technical documentation file
[ ] UKCA Declaration of Conformity (UK)
[ ] FCC authorization / test report (US)
[ ] CPNP notification confirmation (EU cosmetics)
[ ] FDA MoCRA registration (US cosmetics)
[ ] FDA facility registration (US food)
[ ] UK SCPN notification confirmation (UK cosmetics)
[ ] Responsible Person agreement (EU)
[ ] Responsible Person agreement (UK)
[ ] Certificate of origin (for FTA claims)
[ ] Product liability insurance certificate
CORPORATE:
[ ] GMP certificate (required for cosmetics ISO 22716, food FSSC 22000)
[ ] ISO 22716 (cosmetics GMP)
[ ] FSSC 22000 / ISO 22000 (food safety)
[ ] Quality management system documentation
[ ] Supplier qualification records
Dispatch via superpowers:dispatching-parallel-agents.
Collect all product safety documentation for {{PRODUCT_NAME}}.
For each document in the safety section of the inventory:
1. Check if document exists (ask user for file location or reference)
2. If exists: verify it is current (not expired, covers current formulation)
3. If expired: flag for renewal with timeline and cost
4. If missing: specify what is needed, which lab/assessor, timeline, cost
Key documents by product type:
- Cosmetics: CPSR, stability, microbio, PET, patch test
- Electronics: EMC, LVD/safety, environmental, RED (if radio)
- Toys: EN 71-1/2/3/9, CPSIA if for US
- Food: nutritional, contaminant, shelf-life
Return: per-document status (HAVE / EXPIRED / MISSING) with action plan for gaps.
Verify labeling compliance for {{PRODUCT_NAME}} across all target markets ({{MARKETS}}).
For each market:
1. Check label artwork exists
2. Verify all mandatory elements present (use labeling-compliance skill reference)
3. Check language requirements met
4. Verify claims are substantiated
5. Check allergen declarations correct
Return: per-market label status (COMPLIANT / NON-COMPLIANT with specific issues).
Collect substance documentation for {{PRODUCT_NAME}}.
For each ingredient in {{INGREDIENTS_LIST}}:
1. Certificate of Analysis (CoA) from supplier -- current? Complete?
2. REACH registration status (if selling in EU)
3. SVHC screening (is substance on SVHC Candidate List?)
4. CAS number confirmation
5. IFRA certificate (if fragrance ingredient)
6. Purity/contaminant specs
Return: per-ingredient documentation status (COMPLETE / PARTIAL / MISSING).
Collect market-specific certifications for {{PRODUCT_NAME}} in {{MARKETS}}.
For each market:
1. Conformity marking (CE, UKCA, FCC) -- have declaration + technical file?
2. Notification/registration -- completed? (CPNP, FDA MoCRA, UK SCPN)
3. Responsible Person -- appointed with signed agreement?
4. EPR registration -- done? (France, Germany, etc.)
5. Product liability insurance -- covers this market?
6. Certificate of origin -- have it for FTA claim?
Return: per-market certification status (COMPLETE / PARTIAL / MISSING) with action plan.
Assemble all documents into a structured Product Compliance File:
PRODUCT COMPLIANCE FILE -- [Product Name] -- [Version] -- [Date]
TABLE OF CONTENTS:
1. Product Description & Classification
- Product name, category, HS code
- Full ingredient list with CAS numbers
- Manufacturing process summary
- Manufacturing origin
2. Safety Assessment
- CPSR / Risk Assessment
- Test reports (stability, microbio, safety)
- Clinical/human testing (required for SPF claims, dermatological claims)
3. Substance Compliance
- Certificates of Analysis (per ingredient)
- REACH compliance evidence
- SVHC screening
- IFRA certificate (if fragrance)
- Market-specific substance checks
4. Labeling
- Label artwork (per market)
- INCI verification
- Allergen review
- Claims substantiation
5. Market Certifications
- Declarations of Conformity
- Notification confirmations
- RP agreements
- Insurance certificates
- Certificates of origin
6. Quality & Manufacturing
- GMP certificate
- Supplier qualification
- Batch records (sample)
7. Post-Market
- Adverse event reporting procedure
- Recall procedure
- Contact information for authorities
If your company also handles customer data and uses Bastion for ISO 27001:
# Upload product compliance evidence to Bastion
mcp__bastion__upload-compliance-document
name: "CPSR-GlowSerum-2026.pdf"
document: "data:application/pdf;base64,..."
mcp__bastion__add-compliance-test-evidence
testId: "<relevant-test-id>"
name: "Product safety documentation"
description: "CPSR and test reports for Glow Serum product line"
evidenceDocumentId: <returned-doc-id>
mcp__bastion__mark-compliance-test-ready-for-review
testId: "<relevant-test-id>"
GAP REPORT -- [Product Name] -- [Date]
HAVE (complete):
- [document] -- valid until [date]
- [document] -- valid until [date]
EXPIRED (need renewal):
- [document] -- expired [date] -- renewal cost: EUR [X] -- timeline: [weeks]
MISSING (need to create):
- [document] -- required for [market(s)] -- cost: EUR [X] -- timeline: [weeks]
TOTAL GAP CLOSURE:
Documents to create/renew: [count]
Estimated total cost: EUR [X]
Estimated timeline: [weeks] (if parallelized)
Critical path: [which document takes longest]
IMMEDIATE ACTIONS:
1. [ ] [Action] -- [who] -- [deadline]
2. [ ] [Action] -- [who] -- [deadline]
Different stakeholders need different subsets:
| Audience | What they need | Format |
|---|---|---|
| Retail buyer (Sephora, Target) | Safety assessment, test reports, claims substantiation, insurance, CoAs | PDF package with cover letter |
| Amazon marketplace | Product safety documentation, compliance certificates, test reports | Uploaded to Seller Central |
| Customs/import | Certificate of origin, Declaration of Conformity, HS code documentation | Paper originals often required |
| Regulatory authority (DGCCRF, FDA) | Full Product Information File, CPSR, all test reports | Must be available within 48h of request |
| Distributor | Product specs, compliance summary per market, labeling files | Digital package |
| Auditor (ISO, GMP) | Full quality system + product documentation | On-site or virtual inspection |
Evidence blitz is a parallel collection skill. The bottleneck is figuring out WHAT evidence each market expects per product category. The API delivers that map instantly.
With the Cleo Legal API at https://legaldata-public.cleolabs.co:
POST /v2/catalog/match-product — classify the product, then /v2/catalog/regulations?vertical=... returns the exact documentation set each market requires (CPSR vs CPC vs FCC ID vs UN 38.3…)POST /v2/search/bulk — fire 25 parallel queries (one per document category x market) — perfectly matched to the 4-agent dispatch pattern in this skillGET /v2/search?type=standard&country=XX — pull the current standard reference for each test report (so an EN 71-3:2019 report is flagged when EN 71-3:2024 supersedes)GET /v2/authorities/:slug — confirms the correct accreditation body (NANDO, NVLAP, UKAS, CNAS) before you accept a test reportGet started:
# 1. Sign up for free at https://legaldata-public.cleolabs.co
# 2. Get your API key (3 lifetime requests free, then €349/mo for 1M)
# 3. Install the MCP server:
claude mcp add cleo-legal-api https://api.legaldata.cleolabs.co/mcp \
--header "Authorization: Bearer ld_live_YOUR_KEY"
Tested ROI: Gap analysis goes from "spend a day mapping required docs" to "one composite query returns the per-market document checklist". Standard-version drift caught automatically.