Cross-framework compliance readiness orchestrator. An agent skill from borghei/Claude-Skills.
$ npx skills add borghei/Claude-Skills --skill compliance-readiness -a claude-codeProject install by default; add -g for ~/.claude/skills/.
$ gh skill install borghei/Claude-Skills compliance-readiness --agent claude-codeProject scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).
$ git clone --depth 1 https://github.com/borghei/Claude-Skills.git skills-src && mkdir -p .claude/skills && cp -r skills-src/ra-qm-team/audit-prep/compliance-readiness .claude/skills/compliance-readiness && rm -rf skills-srcUse ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.
Claude Code skills documentation · loads skills from .claude/skills/
Install the "compliance-readiness" agent skill from https://github.com/borghei/Claude-Skills/tree/main/ra-qm-team/audit-prep/compliance-readiness into .claude/skills/compliance-readiness/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "compliance-readiness", then confirm the skill loads.Claude Code copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$skill-installer install https://github.com/borghei/Claude-Skills/tree/main/ra-qm-team/audit-prep/compliance-readinessType this inside Codex. $skill-installer <name> installs a curated skill from openai/skills. The installer writes to $CODEX_HOME/skills (default ~/.codex/skills). Restart Codex if the skill does not show up.
$ npx skills add borghei/Claude-Skills --skill compliance-readiness -a codexProject install goes to .agents/skills/; add -g for ~/.codex/skills/.
$ gh skill install borghei/Claude-Skills compliance-readiness --agent codexProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/borghei/Claude-Skills.git skills-src && mkdir -p .agents/skills && cp -r skills-src/ra-qm-team/audit-prep/compliance-readiness .agents/skills/compliance-readiness && rm -rf skills-srcUse ~/.agents/skills/ instead of .agents/skills for a personal install.
Codex skills documentation · loads skills from .agents/skills/
Install the "compliance-readiness" agent skill from https://github.com/borghei/Claude-Skills/tree/main/ra-qm-team/audit-prep/compliance-readiness into .agents/skills/compliance-readiness/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "compliance-readiness", then confirm the skill loads.Codex copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add borghei/Claude-Skills --skill compliance-readiness -a cursorProject install goes to .agents/skills/; add -g for ~/.cursor/skills/.
$ gh skill install borghei/Claude-Skills compliance-readiness --agent cursorProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/borghei/Claude-Skills.git skills-src && mkdir -p .cursor/skills && cp -r skills-src/ra-qm-team/audit-prep/compliance-readiness .cursor/skills/compliance-readiness && rm -rf skills-srcUse ~/.cursor/skills/ instead of .cursor/skills for a personal install.
Cursor skills documentation · loads skills from .cursor/skills/, .agents/skills/, .claude/skills/, .codex/skills/
Install the "compliance-readiness" agent skill from https://github.com/borghei/Claude-Skills/tree/main/ra-qm-team/audit-prep/compliance-readiness into .cursor/skills/compliance-readiness/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "compliance-readiness", then confirm the skill loads.Cursor copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gemini skills install https://github.com/borghei/Claude-Skills.git --path ra-qm-team/audit-prep/compliance-readiness--scope user (default) or --scope workspace; --path is the subfolder of the repo that holds the skill; --consent skips the security confirmation prompt.
$ npx skills add borghei/Claude-Skills --skill compliance-readiness -a gemini-cliProject install goes to .agents/skills/; add -g for ~/.gemini/skills/.
$ gh skill install borghei/Claude-Skills compliance-readiness --agent gemini-cliProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/borghei/Claude-Skills.git skills-src && mkdir -p .gemini/skills && cp -r skills-src/ra-qm-team/audit-prep/compliance-readiness .gemini/skills/compliance-readiness && rm -rf skills-srcUse ~/.gemini/skills/ instead of .gemini/skills for a personal install, then run /skills reload.
Gemini CLI skills documentation · loads skills from .gemini/skills/, .agents/skills/
Install the "compliance-readiness" agent skill from https://github.com/borghei/Claude-Skills/tree/main/ra-qm-team/audit-prep/compliance-readiness into .gemini/skills/compliance-readiness/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "compliance-readiness", then confirm the skill loads.Gemini CLI copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gh skill install borghei/Claude-Skills compliance-readinessInstalls for Copilot at project scope by default; add --scope user for a personal install. Preview a skill first with gh skill preview. Needs GitHub CLI 2.90.0 or later (public preview).
$ npx skills add borghei/Claude-Skills --skill compliance-readiness -a github-copilotProject install goes to .agents/skills/; add -g for ~/.copilot/skills/.
$ git clone --depth 1 https://github.com/borghei/Claude-Skills.git skills-src && mkdir -p .github/skills && cp -r skills-src/ra-qm-team/audit-prep/compliance-readiness .github/skills/compliance-readiness && rm -rf skills-srcUse ~/.copilot/skills/ instead of .github/skills for a personal install. Commit .github/skills so cloud agent and code review can use it.
GitHub Copilot skills documentation · loads skills from .github/skills/, .claude/skills/, .agents/skills/
Install the "compliance-readiness" agent skill from https://github.com/borghei/Claude-Skills/tree/main/ra-qm-team/audit-prep/compliance-readiness into .github/skills/compliance-readiness/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "compliance-readiness", then confirm the skill loads.GitHub Copilot copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add borghei/Claude-Skills --skill compliance-readiness -a opencodeOpenCode documents no install command of its own. Project install goes to .agents/skills/; add -g for ~/.config/opencode/skills/.
$ gh skill install borghei/Claude-Skills compliance-readiness --agent opencodeProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/borghei/Claude-Skills.git skills-src && mkdir -p .opencode/skills && cp -r skills-src/ra-qm-team/audit-prep/compliance-readiness .opencode/skills/compliance-readiness && rm -rf skills-srcUse ~/.config/opencode/skills/ instead of .opencode/skills for a personal install.
OpenCode skills documentation · loads skills from .opencode/skills/, .claude/skills/, .agents/skills/
Install the "compliance-readiness" agent skill from https://github.com/borghei/Claude-Skills/tree/main/ra-qm-team/audit-prep/compliance-readiness into .opencode/skills/compliance-readiness/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "compliance-readiness", then confirm the skill loads.OpenCode copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
compliance-readinessCross-framework compliance readiness orchestrator. An agent skill from borghei/Claude-Skills.
Compliance Readiness is an agent skill from borghei/Claude-Skills. Cross-framework compliance readiness orchestrator. Use when preparing for multi-framework certification (SOC 2 + ISO 27001 + NIST CSF), building a shared-evidence strategy, sequencing certifications, or mapping a control across frameworks.
Its SKILL.md is about 2.3k tokens, which your agent loads only when the skill is triggered. The skill folder holds 8 other files, including scripts and reference files (for example `references/control-mapping-soc2-iso27001-nist.md`, `references/multi-framework-readiness-matrix.md` and `references/shared-evidence-strategy.md`).
It sits in Legal & Compliance, covering SOC 2 and security compliance. The repository describes itself as: 385 AI skills, 77 expert agents, and 900 stdlib Python tools for every team: engineering, PM, marketing, C-level, compliance, business ops, research, and a LinkedIn toolkit… The licence is MIT.
5 steps, taken from the first numbered list in SKILL.md.
Read from SKILL.md and the folder at commit 4a698e8. It shows what the files ask for, not the result of running them.
Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.
From allowed-tools in the SKILL.md frontmatter.
Ships 3 files in scripts/ (Python), which the agent can run.
Shell commands in SKILL.md call:
python3From the folder's file list and the shell code blocks in SKILL.md.
No URLs in SKILL.md.
From URLs in SKILL.md, links to its own repository left out.
Names no API keys, tokens, secrets or passwords.
From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.
Compliance Readiness loads about 2.3k tokens when it runs, and up to ~9k if it reads all its reference files. Until then it costs about 65 tokens; SKILL.md has 843 words of instructions outside code blocks.
Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.
The automated check found no risky patterns in SKILL.md.
Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); the scripts in this folder are not scanned.
The full file from borghei/Claude-Skills at commit 4a698e8, republished under its MIT licence (© borghei). 843 words, ~2,275 tokens.
.claude/skills/compliance-readiness/SKILL.md (or your agent's skills folder). This skill also uses 6 other files; get the full folder from GitHub.The orchestrator skill for organizations pursuing multiple compliance frameworks. Reduces duplication, accelerates certification, and shares evidence across SOC 2, ISO 27001, NIST CSF, GDPR, HIPAA, and others.
When to use this skill vs. framework-specific audit-prep:
soc2-audit-prep, gdpr-audit-prep, etc.): single-framework sprint| Situation | Skill applies |
|---|---|
| Pursuing SOC 2 + ISO 27001 + NIST CSF in parallel | Yes — start here |
| Healthcare org pursuing SOC 2 + HIPAA + ISO 27001 | Yes |
| Building shared-evidence platform | Yes — see shared evidence strategy |
| Mapping one control to multiple frameworks | Yes — scripts/shared_evidence_finder.py |
| Deciding which framework to certify first | Yes — see sequencing decisions |
| Generating multi-framework roadmap | Yes — scripts/readiness_roadmap_generator.py |
| Single-framework audit prep | Use framework-specific skill |
Most controls are shared across compliance frameworks. A well-designed control catalog satisfies multiple frameworks simultaneously. Without coordination, you build separate evidence + procedures per framework — 3x the work, 3x the maintenance, 3x the auditor confusion.
Common shared controls:
| Control area | SOC 2 | ISO 27001 | NIST CSF | NIS2 | DORA | PCI-DSS | HIPAA | GDPR |
|---|---|---|---|---|---|---|---|---|
| Access control | CC6.1 | A.8.5 | PR.AA | Art.21.2.j | Art.9.4 | Req 7-8 | §164.312(d) | Art.32 |
| Encryption | CC6.7 | A.8.24 | PR.DS | Art.21.2.h | Art.9.2 | Req 3-4 | §164.312(a)(2)(iv) | Art.32 |
| Incident response | CC7.4 | A.5.24 | RS.MA | Art.23 | Art.17 | Req 12.10 | §164.308(a)(6) | Art.33 |
| Risk assessment | CC3.1 | Cl.6.1 | ID.RA | Art.21.1 | Art.6 | Req 12.2 | §164.308(a)(1) | Art.35 |
| Logging | CC7.2 | A.8.15 | DE.CM | Art.21.2.b | Art.10 | Req 10 | §164.312(b) | Art.30 |
| Vendor management | CC9.2 | A.5.19 | GV.SC | Art.21.2.d | Art.28 | Req 12.8 | §164.308(b) | Art.28 |
See references/control-mapping-soc2-iso27001-nist.md for the full mapping.
Which framework to pursue first?
SaaS / Tech (B2B enterprise customers):
Healthcare (US):
FinTech / financial services (EU):
Medical devices:
Build one control catalog covering all in-scope frameworks. Each control maps to multiple frameworks. One implementation; one evidence trail.
Control: Access Reviews (Quarterly)
- SOC 2: CC6.3
- ISO 27001: A.5.18
- NIST CSF: PR.AA-04
- HIPAA: §164.308(a)(4)
- GDPR: Art.32 (security of processing)
Evidence: Quarterly access-review records, signed by team lead
Frequency: Quarterly
Owner: IT SecurityOne artifact satisfies five frameworks.
Single source-of-truth for evidence (Drata / Vanta / Thoropass / Sprinto / homegrown):
Annual management review covers all frameworks:
Plan internal audit to cover overlapping clauses:
Weeks 1-4: Common control catalog build; gap analysis per framework
Weeks 5-8: Gap remediation (technical + procedural)
Weeks 9-12: Evidence collection + walkthroughs
Weeks 13-14: SOC 2 audit
Weeks 15-16: ISO 27001 Stage 1
(then ISO 27001 Stage 2 ~4-8 weeks later)Weeks 1-2: Audit readiness assessment per framework
Weeks 3-6: Gap remediation
Weeks 7-9: Walkthroughs + evidence finalization
Weeks 10-12: Audits (sequential or parallel depending on auditor capacity)Before generating the roadmap, confirm these inputs. If any is unknown or vague, ASK — do not assume:
Stop rule: ask only the 2-3 that most change the output. If the user says "just draft it," proceed and list your assumptions at the top of the roadmap.
python3 scripts/multi_framework_scorer.py --config controls.yamlpython3 scripts/shared_evidence_finder.py --frameworks SOC2,ISO27001python3 scripts/readiness_roadmap_generator.py --target-frameworks SOC2,ISO27001,GDPR| Script | Purpose |
|---|---|
scripts/multi_framework_scorer.py | Score readiness across multiple frameworks |
scripts/shared_evidence_finder.py | Identify shared controls; map evidence to frameworks |
scripts/readiness_roadmap_generator.py | Generate multi-framework readiness roadmap |
ra-qm-team/soc2-compliance-expert — deep SOC 2 programra-qm-team/information-security-manager-iso27001 — deep ISO 27001 programra-qm-team/nist-csf-specialist — deep NIST CSF programra-qm-team/gdpr-dsgvo-expert — deep GDPR programra-qm-team/fda-consultant-specialist — deep FDA programra-qm-team/infrastructure-compliance-auditor — cross-framework infra auditra-qm-team/audit-prep/* — framework-specific audit-prep skills© borghei, MIT. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file
SKILL.md and 6 other files (scripts, references) in ra-qm-team/audit-prep/compliance-readiness of borghei/Claude-Skills.
Open the folder on GitHubat commit 4a698e8
Compliance Readiness next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.
| Skill | Stars | Used in | Tokens | Auto-check | Licence | Repo updated |
|---|---|---|---|---|---|---|
| Compliance Readiness this skillborghei/Claude-Skills | 886 | — | ~2.3k | Automated safety check: Pass | MIT | |
| Nist 800 53Sushegaad/Claude-Skills-Governance-Risk-and-Compliance | 943 | 1 repos | ~3.3k | Automated safety check: Pass | MIT | |
| Soc2Sushegaad/Claude-Skills-Governance-Risk-and-Compliance | 943 | 1 repos | ~2.7k | Automated safety check: Pass | MIT | |
| Grc Knowledgemlunato47/claude-grc-plugin | 184 | — | ~6.1k | Automated safety check: Pass | MIT | |
| Information Security Manager Iso27001davila7/claude-code-templates | 32k | 1 repos | ~2.9k | Automated safety check: Pass | MIT | |
| Audit Frameworkscartography-cncf/cartography | 4.1k | — | ~2.8k | Automated safety check: Pass | Apache-2.0 |
Sushegaad/Claude-Skills-Governance-Risk-and-Compliance
NIST SP 800-53 Rev 5 compliance advisor — all 20 control families (AC, AT, AU, CA, CM, CP, IA, IR, MA, MP, PE, PL, PM, PS, PT, RA, SA, SC, SI, SR), Low/Moderate/High baseline selection, FIPS 199/200…
Sushegaad/Claude-Skills-Governance-Risk-and-Compliance
Expert SOC 2 compliance assistant covering all five Trust Services Criteria (Security/CC, Availability/A, Confidentiality/C, Processing Integrity/PI, Privacy/P).
mlunato47/claude-grc-plugin
Senior GRC analyst expertise across 18 compliance frameworks — NIST 800-53, FedRAMP (Rev5 + 20x/CR26, KSIs, VDR/VER, Certification Classes A–D), DoD/DoW Impact Levels (IL2–IL6, DISA Cloud SRG), ITAR…
davila7/claude-code-templates
Senior Information Security Manager specializing in ISO 27001 and ISO 27002 implementation for HealthTech and MedTech companies.
cartography-cncf/cartography
Audit Cartography's rules and compliance frameworks under cartography/rules/data/rules/.
GRCEngClub/claude-grc-engineering
Builds and deploys a serverless trust center that publishes a company's compliance posture, with gated access to audit reports and an admin dashboard.
borghei/Claude-Skills
Test and evaluation harness for AI agents — scenario suites, deterministic replay, regression diffing, cost and latency budgets.
borghei/Claude-Skills
Run delivery when AI coding and ops agents take tickets. An agent skill from borghei/Claude-Skills.
borghei/Claude-Skills
Check AI-generated marketing content and reviews for required disclosures under the EU AI Act, FTC rules and platform AI-label policies.
borghei/Claude-Skills
Idea to AI-generated prototype to customer validation to engineering handoff.
borghei/Claude-Skills
Analytics engineering across data modeling, dbt, transformation, and semantic layers.
borghei/Claude-Skills
Ansoff Matrix — 4-quadrant framework for growth options: market penetration, market/product development, and diversification.
Categories
Cross-framework compliance readiness orchestrator. An agent skill from borghei/Claude-Skills. Compliance Readiness is an agent skill from borghei/Claude-Skills. Cross-framework compliance readiness orchestrator.
Compliance Readiness fits situations like: preparing for multi-framework certification (SOC 2 + ISO 27001 + NIST CSF); building a shared-evidence strategy; sequencing certifications; mapping a control across frameworks.
Run `npx skills add borghei/Claude-Skills --skill compliance-readiness -a claude-code`. Or copy the skill folder (ra-qm-team/audit-prep/compliance-readiness in borghei/Claude-Skills) into .claude/skills/compliance-readiness in your project. Claude Code loads it when a task matches its description.
Run `npx skills add borghei/Claude-Skills --skill compliance-readiness -a codex`. Or copy the skill folder (ra-qm-team/audit-prep/compliance-readiness in borghei/Claude-Skills) into .agents/skills/compliance-readiness in your project. Codex loads it when a task matches its description.
Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add borghei/Claude-Skills --skill compliance-readiness -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/compliance-readiness, .gemini/skills/compliance-readiness, .github/skills/compliance-readiness and .opencode/skills/compliance-readiness in your project.
Going by SKILL.md and its folder, Compliance Readiness needs Python for the scripts in its folder and the command-line tools its instructions call (python3). Our summary lists: Python 3.
SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.
Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. The check reads SKILL.md only: the scripts in the folder are not scanned, so read them before running anything.
Compliance Readiness is published under the MIT licence (declared in SKILL.md). It allows redistribution, so the full SKILL.md is shown on this page.
About 2.3k tokens (SKILL.md is roughly 9.1k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full. Its references folder adds about 6.7k tokens, read only when the agent opens those files.
Skills that share tags, products or a category with Compliance Readiness: Nist 800 53 (Sushegaad/Claude-Skills-Governance-Risk-and-Compliance, 943 stars), Soc2 (Sushegaad/Claude-Skills-Governance-Risk-and-Compliance, 943 stars), Grc Knowledge (mlunato47/claude-grc-plugin, 184 stars) and Information Security Manager Iso27001 (davila7/claude-code-templates, 32k stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.
borghei (a GitHub user) maintains it in borghei/Claude-Skills, which has 886 GitHub stars. The repository holds 354 skills in this directory. The repository was last updated on October 7, 2026.
Source: borghei/Claude-Skills on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.
