Agent skill

Klingai Compliance Review

by jeremylongshore in jeremylongshore/tons-of-skills-marketplace

Security and compliance review framework for Kling AI integrations.

MITAuto-check passedLegal & Compliance

Install Klingai Compliance Review

skills CLI
$ npx skills add jeremylongshore/tons-of-skills-marketplace --skill klingai-compliance-review -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI
$ gh skill install jeremylongshore/tons-of-skills-marketplace klingai-compliance-review --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy
$ git clone --depth 1 https://github.com/jeremylongshore/tons-of-skills-marketplace.git skills-src && mkdir -p .claude/skills && cp -r skills-src/skills/.curated/klingai-compliance-review .claude/skills/klingai-compliance-review && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Facts

Skill name
klingai-compliance-review
GitHub stars
2.8k
Token cost
~1.8k tokens
SKILL.md length
432 words
Files
5 (incl. references)
Skills in repo
3,342
Repo updated
First seen
Licence
MIT

At a glance

Security and compliance review framework for Kling AI integrations.

  • Works in 4 steps: Review a sandbox canary against content… → Record only aggregate and redacted… → Halt release and remove drafts when any… → …
  • Preparing for audits
  • SKILL.md covers Overview, Data Flow Assessment, Security Checklist and Privacy Assessment, plus 8 more sections
  • Instructions only: no scripts, shell commands, URLs or credentials in SKILL.md

What it does

Klingai Compliance Review is an agent skill from jeremylongshore/tons-of-skills-marketplace. Security and compliance review framework for Kling AI integrations. Use when preparing for audits or reviewing security posture. Trigger with phrases like 'klingai compliance', 'kling ai security review', 'klingai audit prep', 'video generation compliance'.

Its SKILL.md is about 1.8k tokens, which your agent loads only when the skill is triggered. The skill folder holds 5 other files, including reference files (for example `references/compliance-checker.md`, `references/compliance-report-template.md` and `references/errors.md`). Compatibility notes: Designed for Claude Code

It sits in Legal & Compliance, covering AI video generation, Regulatory compliance and Prompt injection and agent security. The repository describes itself as: Model-agnostic agent-skills platform with a harness-free canonical layer, verified adapters, and the ccpi package manager. Explore at tonsofskills.com. The licence is MIT.

When your agent uses it

  • Preparing for audits
  • Reviewing security posture
  • With phrases like klingai compliance
  • Kling ai security review

Example prompts

  • “klingai compliance”
  • “kling ai security review”
  • “klingai audit prep”
  • “/klingai-compliance-review”

Requirements

  • Python 3
  • Compatibility (from SKILL.md): Designed for Claude Code
  • Pre-approved tools (allowed-tools): Read, Write, Edit, Bash(npm:*), Grep

Workflow steps

4 steps, taken from the first numbered list in SKILL.md.

  1. Review a sandbox canary against content policy, rights/attribution, access scope, budget, destination, and retention requirements.
  2. Record only aggregate and redacted evidence; reject artifacts containing private information, unlicensed material, restricted content, or…
  3. Halt release and remove drafts when any mandatory check fails; assign the issue to an owner and verify the remediation in a new canary.
  4. Approve promotion only after all required checks pass and retain the redacted review receipt for the authorized window.

What it can do on your machine

Read from SKILL.md and the folder at commit cfae287. It shows what the files ask for, not the result of running them.

  • Tool permissions

    Pre-approves these tools, so the agent can use them without asking each time:

    • Read
    • Write
    • Edit
    • Bash(npm:*)
    • Grep

    From allowed-tools in the SKILL.md frontmatter.

  • Runs code

    No scripts in the folder and no shell commands in SKILL.md (its code samples are python).

    From the folder's file list and the shell code blocks in SKILL.md.

  • Network

    Links to these hosts (documentation or services it may open):

    • owasp.org

    From URLs in SKILL.md, links to its own repository left out.

  • Credentials

    Names no API keys, tokens, secrets or passwords.

    From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

  • Compatibility

    Designed for Claude Code

    From compatibility in the SKILL.md frontmatter.

Context cost

Klingai Compliance Review loads about 1.8k tokens when it runs, and up to ~5k if it reads all its reference files. Until then it costs about 71 tokens; SKILL.md has 432 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it
~71
When it runs · the whole SKILL.md, loaded when a task matches
~1.8k
With references · SKILL.md plus every file in references/, read only if the agent opens them
~5k

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check passed

The automated check found no risky patterns in SKILL.md.

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.

SKILL.md

The full file from jeremylongshore/tons-of-skills-marketplace at commit cfae287, republished under its MIT licence (© jeremylongshore). 432 words, ~1,818 tokens.

Download SKILL.mdSave it as .claude/skills/klingai-compliance-review/SKILL.md (or your agent's skills folder). This skill also uses 4 other files; get the full folder from GitHub.
name
klingai-compliance-review
description
Security and compliance review framework for Kling AI integrations. Use when preparing for audits or reviewing security posture. Trigger with phrases like 'klingai compliance', 'kling ai security review', 'klingai audit prep', 'video generation compliance'.
allowed-tools
Read, Write, Edit, Bash(npm:*), Grep
compatibility
Designed for Claude Code
version
1.18.0
license
MIT
author
Jeremy Longshore <jeremy@intentsolutions.io>
tags
saas, kling-ai, compliance, security

Kling AI Compliance Review

Overview

Security and compliance assessment framework for Kling AI integrations. Covers data handling, credential management, content policy, privacy, and regulatory considerations.

Data Flow Assessment

User Prompt → [Your App] → [Kling AI API] → [Kling GPU Cluster]
                                                     ↓
[Your CDN] ← download ← [Kling CDN (temporary URL)] ← Generated Video
Data Residency
DataLocationRetention
PromptsSent to Kling servers (China/global)Processing only
Generated videosKling CDN (temporary URLs)~24-72 hours
API keysYour infrastructureYou control
Audit logsYour infrastructureYou control

Security Checklist

Credential Security
  • AK/SK stored in secrets manager (not env files, not code)
  • Keys rotated quarterly
  • Separate keys per environment
  • JWT tokens never logged
  • Access key prefix logged (first 8 chars only)
python
# Safe logging pattern
def safe_log_key(access_key: str) -> str:
    return access_key[:8] + "..." + access_key[-4:]
Network Security
  • All API calls over HTTPS (enforced by base URL)
  • Webhook endpoints use HTTPS with valid TLS cert
  • Network egress rules allow api.klingai.com:443
  • No API keys in query strings (Bearer token in header only)
Input Validation
  • Prompt length validated (<= 2500 chars)
  • Image URLs validated before sending
  • User input sanitized against injection
  • Content policy pre-filtering active
Output Handling
  • Kling CDN URLs treated as temporary
  • Videos downloaded and stored on your infrastructure
  • Generated content scanned before serving to end users
  • Video metadata stripped of sensitive info before public delivery

Privacy Assessment

QuestionConsideration
Do prompts contain PII?Filter PII before sending to API
Do images contain faces?Check consent requirements (GDPR Art. 6)
Are generated videos stored?Define retention policy
Who has access to generated content?RBAC on storage layer
Cross-border data transfer?Kling API servers may be in China

GDPR Considerations

python
class GDPRCompliantClient:
    """Kling client with GDPR data handling."""

    def __init__(self, base_client, audit_logger):
        self.client = base_client
        self.audit = audit_logger

    def text_to_video(self, prompt: str, data_subject_id: str = None, **kwargs):
        # Log processing activity (GDPR Art. 30)
        self.audit.log("processing_activity", "system", {
            "purpose": "video_generation",
            "data_subject": data_subject_id,
            "legal_basis": "legitimate_interest",
            "data_categories": ["text_prompt"],
            "recipients": ["klingai_api"],
        })

        return self.client.text_to_video(prompt, **kwargs)

    def handle_deletion_request(self, data_subject_id: str):
        """Handle GDPR right to erasure (Art. 17)."""
        # Delete stored videos associated with the data subject
        # Delete audit logs referencing the data subject
        # Note: cannot delete data already sent to Kling API
        self.audit.log("deletion_request", "system", {
            "data_subject": data_subject_id,
            "action": "processed",
        })

Automated Compliance Check

python
def run_compliance_check(config: dict) -> dict:
    """Run automated compliance checks against configuration."""
    checks = []

    # Check credential storage
    if config.get("key_source") == "environment":
        checks.append(("WARN", "credentials", "Using env vars; prefer secrets manager"))
    elif config.get("key_source") == "secrets_manager":
        checks.append(("PASS", "credentials", "Using secrets manager"))

    # Check TLS
    if config.get("base_url", "").startswith("https://"):
        checks.append(("PASS", "tls", "HTTPS enforced"))
    else:
        checks.append(("FAIL", "tls", "Not using HTTPS"))

    # Check content filtering
    if config.get("content_filter_enabled"):
        checks.append(("PASS", "content_filter", "Pre-submission filtering active"))
    else:
        checks.append(("WARN", "content_filter", "No pre-submission content filtering"))

    # Check audit logging
    if config.get("audit_logging"):
        checks.append(("PASS", "audit", "Audit logging enabled"))
    else:
        checks.append(("FAIL", "audit", "No audit logging"))

    # Print report
    for status, area, message in checks:
        icon = {"PASS": "OK", "WARN": "!!", "FAIL": "XX"}[status]
        print(f"  [{icon}] {area}: {message}")

    return {
        "passed": sum(1 for s, _, _ in checks if s == "PASS"),
        "warnings": sum(1 for s, _, _ in checks if s == "WARN"),
        "failed": sum(1 for s, _, _ in checks if s == "FAIL"),
    }

Prerequisites

  • An approved review scope, rights-cleared or synthetic test artifact, current policy and retention standard, authorized reviewers, redaction rules, draft-only destination, and a remediation owner.
Show full SKILL.md (169 more words)Show less

Instructions

  1. Review a sandbox canary against content policy, rights/attribution, access scope, budget, destination, and retention requirements.
  2. Record only aggregate and redacted evidence; reject artifacts containing private information, unlicensed material, restricted content, or unsupported claims.
  3. Halt release and remove drafts when any mandatory check fails; assign the issue to an owner and verify the remediation in a new canary.
  4. Approve promotion only after all required checks pass and retain the redacted review receipt for the authorized window.

Output

Produce a compliance receipt with review scope, artifact classification, check outcomes, owner/approval state, draft-only assertion, remediation/rollback reference, and retention/removal proof. Exclude prompts, asset URLs, identities, and secrets.

Error Handling

ConditionResponse
Policy, rights, or privacy check failsBlock publication, remove the draft, and require documented remediation and re-review.
Evidence is incomplete or unredactedReject the receipt and regenerate it with approved aggregate fields only.

Examples

scope=staging-canary; artifact=synthetic; policy=pass; rights=pass; privacy=pass; destination=draft-only; approval=pending is ready for owner review.

Resources

© jeremylongshore, MIT. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file

Files

SKILL.md and 4 other files (references) in skills/.curated/klingai-compliance-review of jeremylongshore/tons-of-skills-marketplace.

  • SKILL.md
  • references/compliance-checker.md
  • references/compliance-report-template.md
  • references/errors.md
  • references/examples.md

Open the folder on GitHubat commit cfae287

Compare with similar skills

Klingai Compliance Review next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

Klingai Compliance Review compared with similar skills
SkillStarsUsed inTokensAuto-checkLicenceRepo updated
Klingai Compliance Review this skilljeremylongshore/tons-of-skills-marketplace2.8k—~1.8kAutomated safety check: PassMIT
AI SAFE2 Secure Build CopilotCyberStrategyInstitute/ai-safe2-framework147—~1.2kAutomated safety check: PassCustom licence
Sailpillar-labs/sail-skill113—~5.1kAutomated safety check: PassCustom licence
Agent Owasp Compliancegithub/awesome-copilot40k1 repos~3kAutomated safety check: PassMIT
HIPAA Pre-Deployment Compliance Checkmaziyarpanahi/openmed5.5k—~2kAutomated safety check: PassApache-2.0
Kesekit Checkcdppcorp/KESE-KIT360—~1.3kAutomated safety check: PassMIT

Similar skills

  • AI SAFE2 Secure Build Copilot

    CyberStrategyInstitute/ai-safe2-framework

    Applies the AI SAFE2 framework to security reviews, code reviews and compliance mapping for AI agents, RAG pipelines and MCP servers.

    147 GitHub stars~1.2k tokensUpdated yesterday
    SecurityAuto-check passed
  • Sail

    pillar-labs/sail-skill

    Apply the SAIL (Secure AI Lifecycle) V2 framework by Pillar Security to secure AI applications and agents.

    113 GitHub stars~5.1k tokensUpdated 3 mo ago
    SecurityAuto-check passed
  • Agent Owasp Compliance

    github/awesome-copilot

    Official

    Check any AI agent codebase against the OWASP Agentic Security Initiative (ASI) Top 10 risks.

    40k GitHub starsUsed in 1 repo~3k tokens
    SecurityAuto-check passed
  • Walks a data pipeline against the HIPAA Privacy and Security Rule checklist and produces a gap report before it processes patient data.

    5.5k GitHub stars~2k tokensUpdated today
    Legal & ComplianceAuto-check passed
  • Kesekit Check

    cdppcorp/KESE-KIT

    Run a pre-deployment security compliance checklist based on KISA guidelines.

    360 GitHub stars~1.3k tokensUpdated 6 mo ago
    SecurityAuto-check passed
  • Hipaa Compliance

    Sushegaad/Claude-Skills-Governance-Risk-and-Compliance

    Expert HIPAA compliance assistant for healthcare and software contexts.

    946 GitHub starsUsed in 1 repo~2.3k tokens
    Legal & ComplianceAuto-check passed

More from jeremylongshore/tons-of-skills-marketplace

All 3,342 skills in this repo
  • Performing Security Code Review

    jeremylongshore/tons-of-skills-marketplace

    Execute this skill enables AI assistant to conduct a security-focused code review using the security-agent plugin.

    2.8k GitHub starsUsed in 2 repos~1.3k tokens
    Auto-check: notes
  • Adapting Transfer Learning Models

    jeremylongshore/tons-of-skills-marketplace

    Build this skill automates the adaptation of pre-trained machine learning models using transfer learning techniques.

    2.8k GitHub stars~1.1k tokensUpdated today
    Auto-check passed
  • Agent Context Loader

    jeremylongshore/tons-of-skills-marketplace

    Execute proactive auto-loading: automatically detects and loads agents.md files.

    2.8k GitHub stars~1.1k tokensUpdated today
    Auto-check passed
  • Aggregating Performance Metrics

    jeremylongshore/tons-of-skills-marketplace

    Aggregate and centralize performance metrics from applications, systems, databases, caches, and services.

    2.8k GitHub stars~1.2k tokensUpdated today
    Auto-check passed
  • Analyzing Capacity Planning

    jeremylongshore/tons-of-skills-marketplace

    Execute this skill enables AI assistant to analyze capacity requirements and plan for future growth.

    2.8k GitHub stars~947 tokensUpdated today
    Auto-check passed
  • Analyzing Database Indexes

    jeremylongshore/tons-of-skills-marketplace

    Process use when you need to work with database indexing. An agent skill from jeremylongshore/tons-of-skills-marketplace.

    2.8k GitHub stars~2k tokensUpdated today
    Auto-check passed

Questions about Klingai Compliance Review

What does Klingai Compliance Review do?

Security and compliance review framework for Kling AI integrations. Klingai Compliance Review is an agent skill from jeremylongshore/tons-of-skills-marketplace. Security and compliance review framework for Kling AI integrations.

When should I use Klingai Compliance Review?

Klingai Compliance Review fits situations like: preparing for audits; reviewing security posture; with phrases like klingai compliance; kling ai security review.

How do I install Klingai Compliance Review in Claude Code?

Run `npx skills add jeremylongshore/tons-of-skills-marketplace --skill klingai-compliance-review -a claude-code`. Or copy the skill folder (skills/.curated/klingai-compliance-review in jeremylongshore/tons-of-skills-marketplace) into .claude/skills/klingai-compliance-review in your project. Claude Code loads it when a task matches its description.

How do I install Klingai Compliance Review in Codex?

Run `npx skills add jeremylongshore/tons-of-skills-marketplace --skill klingai-compliance-review -a codex`. Or copy the skill folder (skills/.curated/klingai-compliance-review in jeremylongshore/tons-of-skills-marketplace) into .agents/skills/klingai-compliance-review in your project. Codex loads it when a task matches its description.

Can I use Klingai Compliance Review in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add jeremylongshore/tons-of-skills-marketplace --skill klingai-compliance-review -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/klingai-compliance-review, .gemini/skills/klingai-compliance-review, .github/skills/klingai-compliance-review and .opencode/skills/klingai-compliance-review in your project.

What does Klingai Compliance Review need to run?

SKILL.md names no scripts, command-line tools or credentials: Klingai Compliance Review is instructions for the agent only. Our summary lists: Python 3. Its frontmatter pre-approves these tools: Read, Write, Edit, Bash(npm:*), Grep. Compatibility (from SKILL.md): Designed for Claude Code.

Does Klingai Compliance Review access the network?

SKILL.md names 1 domain. As links in the text: owasp.org. This is read from the text; nothing was executed.

Is Klingai Compliance Review safe to install?

Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.

What licence does Klingai Compliance Review use?

Klingai Compliance Review is published under the MIT licence (declared in SKILL.md). It allows redistribution, so the full SKILL.md is shown on this page.

How many tokens does Klingai Compliance Review use?

About 1.8k tokens (SKILL.md is roughly 7.3k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full. Its references folder adds about 3.2k tokens, read only when the agent opens those files.

What are the alternatives to Klingai Compliance Review?

Skills that share tags, products or a category with Klingai Compliance Review: AI SAFE2 Secure Build Copilot (CyberStrategyInstitute/ai-safe2-framework, 147 stars), Sail (pillar-labs/sail-skill, 113 stars), Agent Owasp Compliance (github/awesome-copilot, 40k stars) and HIPAA Pre-Deployment Compliance Check (maziyarpanahi/openmed, 5.5k stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains Klingai Compliance Review?

jeremylongshore (a GitHub user) maintains it in jeremylongshore/tons-of-skills-marketplace, which has 2,827 GitHub stars. The repository holds 3,342 skills in this directory. The repository was last updated on October 10, 2026.

Source: jeremylongshore/tons-of-skills-marketplace on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.