9 plugins from public Claude Code marketplaces. Each one bundles skills, slash commands, agents, hooks or MCP servers that install together.
lawve-ailawve-ai/awesome-legal-skills1
testland-qatestland/qa1Submit the repo with .claude-plugin/marketplace.json and we list every plugin.
Submit marketplaceHR policy documentation, legal compliance templates (GDPR/SOC2/HIPAA), employment contracts, and regulatory documentation
Prove your user access reviews before the auditor tests them. Three deterministic stdlib scripts: a roster diff that joins the HR roster to account exports and blocks on leavers still enabled or used after exit, privileged orphans and ownerless privileged service accounts; a campaign checker that blocks on population gaps, undecided lines, self-review and revokes not removed inside your window, and flags rubber-stamping; and a control mapper that turns findings into per-control status for SOC 2, ISO 27001, NIST 800-53, PCI DSS, HIPAA and SOX IPE. Ships cs-access-reviewer agent, /cs-access-review and /cs-access-diff commands, 3 cited references and an access review sign-off template.
Compliance & trust skills for regulated and enterprise teams: SOC 2 Readiness, GDPR Compliance, HIPAA Safeguards, ISO 27001 ISMS, Vendor Security Review, and Data Retention Policy. Each ships a stdlib scoring/validation script.
SOC2, HIPAA, and GDPR compliance validation, secrets scanning, compliance checklists, and regulatory documentation
General Counsel advisory for startups: contract risk scanner (12 founder-killer patterns: auto-renew traps, uncapped indemnity, vague IP, MFN pricing, missing DPA, one-sided venue, broad non-solicit, perpetual license-back, etc.) and term sheet analyzer (0-100 founder-friendliness across 12 dimensions). 3 in-depth references: contracts playbook (7 startup contract types), IP + regulatory landscape mapping (HIPAA, GDPR, FDA, fintech, EU AI Act, SOC 2 → ISO sequencing), term sheet decoder (full glossary + founder-friendly defaults). Standalone-installable; also bundled in c-level-skills. Stdlib-only. NOT a substitute for licensed counsel.
Check infrastructure compliance (SOC2, HIPAA, PCI-DSS)
Expert HIPAA compliance assistant for healthcare and software contexts. Use this skill whenever the user mentions HIPAA, PHI (Protected Health Information), ePHI, covered entities, business associates, healthcare data privacy, medical records, health information security, BAA (Business Associate Agreements), or any compliance review involving patient data. Also trigger for requests to draft privacy notices, HIPAA policies, consent forms, security risk assessments, or breach notification letters. Use for developers building healthcare software who need technical safeguard guidance (encryption, access controls, audit logs), compliance officers reviewing documents or procedures.
Compliance testing for GDPR, CCPA/CPRA, HIPAA, PCI DSS v4.0, SOC 2 and ISO/IEC 27001: control tests, audit-trail tests, and evidence collection. Scores existing tests and evidence against a framework's criteria, packages SOC 2 Type II evidence for auditors, and runs an adversarial readiness review.
security-complianceCheck HIPAA compliance
