Regulatory legal-AI skills in General

83 legal AI skills for regulatory in General.

$ai-governance-legal:ai-inventory

Apache-2.0GeneralRegulatory

EU AI Act per-system inventory — track each AI system's role (provider, deployer, importer, distributor, authorized representative, product manufacturer) and risk tier (prohibited, high-risk, limited, minimal, GPAI, GPAI+systemic). Role and tier are assessed per system, not per company. Use when the user says "ai inventory", "add an ai system", "what systems do we have", "classify this ai system", "eu ai act register", or "ai system registry".

$regulatory-legal:cold-start-interview

Apache-2.0GeneralRegulatory

Cold-start interview — builds your watchlist, indexes the policy library, and learns your materiality threshold so the monitor surfaces signal instead of noise. Use on fresh install, when reconfiguring (--redo), or when re-checking what connectors are actually responding (--check-integrations).

$regulatory-legal:customize

Apache-2.0GeneralRegulatory

Guided customization of your regulatory practice profile — change one thing without re-running the whole cold-start interview. Adjust watched regulators, policy library index, materiality threshold, gap response process, feed configuration, or matter workspace paths. Use when the user says "change my [thing]", "add a regulator", "update my watchlist", "edit my threshold", or "customize".

$regulatory-legal:policy-diff

Apache-2.0GeneralRegulatory

Diff a specific regulatory change against the indexed policy library. Use when a reg has changed and you need to know which policies it touches and what the gap is, when the user says "diff this reg against our policies", "which policy does this affect", or "gap analysis", or when reg-feed-watcher hands off a material item.

$regulatory-legal:policy-redraft

Apache-2.0GeneralRegulatory

Produce a proposed marked-up policy redraft that closes a gap found by $regulatory-legal:gaps or $regulatory-legal:policy-diff. A first draft for internal review — not for direct application to approved policy documents. Use when the user says "redraft the policy", "draft the policy fix", "mark up the policy", or when gap-surfacer hands off a gap for drafting.

$regulatory-legal:reg-feed-watcher

Apache-2.0GeneralRegulatory

Check regulatory feeds now and report what's new since the last check, filtered by your materiality threshold. Use when the user says "check the feeds", "what's new", "regulatory update", when running from the scheduled agent, or when manually pasting a regulatory development for classification and diff.

Aia generation

Apache-2.0GeneralRegulatory

Run an AI impact assessment — structured intake, risk analysis, regulatory classification per regime in scope, policy consistency diff, and recommendation with conditions. Uses the house-style structure learned from the seed impact assessment in `~/.claude/plugins/config/claude-for-legal/ai-governance-legal/CLAUDE.md`. Use when user says "impact assessment for", "assess this AI use case", "run an AIA", "generate an AIA", "we need to document this AI system", "AI risk assessment for X", or follows a conditional triage result.

AI Content Detector

Apache-2.0GeneralRegulatory

Identify content generated by AI systems.

AI Governance Policy

MITGeneralRegulatory

Use when drafting an AI governance policy for an organization addressing responsible AI use, risk assessment, bias detection, transparency, human oversight, data handling for AI training, vendor evaluation, and incident response. Covers privacy and data protection practice area across MENA (UAE, KSA, EG) and global jurisdictions, with attention to emerging AI-specific regulatory frameworks.

AI Governance Reviewer Skill

Apache-2.0GeneralRegulatory

Use this skill when the user wants an AI governance, legal-risk, privacy, compliance, procurement, or vendor-risk review of an internal AI use case, an AI product feature, an LLM workflow, or a third-party AI vendor. The skill asks intake and clarifying questions first when facts or evidence are missing, identifies required documentation and missing evidence, maps the use case to AI governance frameworks and applicable legal domains, and produces a preliminary or final governance review with scorecards, findings, owners, remediation actions, and follow-up questions.

AI inventory

Apache-2.0GeneralRegulatory

EU AI Act per-system inventory — track each AI system's role (provider, deployer, importer, distributor, authorized representative, product manufacturer) and risk tier (prohibited, high-risk, limited, minimal, GPAI, GPAI+systemic). Role and tier are assessed per system, not per company. Use when the user says "ai inventory", "add an ai system", "what systems do we have", "classify this ai system", "eu ai act register", or "ai system registry".

AI Use Policy generator

MITGeneralRegulatory

Generate a polished three-page AI Use Policy for the user's company. Researches the company and sector, drafts the full policy in chat for the user to validate, then writes a print-ready HTML file plus a sidecar JSON. Use when the user asks for an "AI policy", "AI use policy", "EU AI Act policy", "AI policy one-pager", or any request to draft, generate, or update a company AI governance policy. Aligned to EU AI Act Articles 4, 5 and 50.

Bind Recon

MITGeneralRegulatory

Survey existing compliance artifacts — policies, audits, certifications.

Cold start interview

Apache-2.0GeneralRegulatory

Run the cold-start interview — learns your AI governance practice and writes `~/.claude/plugins/config/claude-for-legal/ai-governance-legal/CLAUDE.md` from your AI policy, a reference impact assessment, and key vendor AI agreements. Use when the practice profile is missing or contains `[PLACEHOLDER]` markers, or when user says "set up ai governance plugin", "onboard me", "configure ai governance".

Cold start interview

Apache-2.0GeneralRegulatory

冷启动访谈——建立你的监管监测清单、索引政策库并了解你的重要度阈值，使监测器输出信号而非噪音。适用于全新安装、重新配置时（--redo），或重新检查哪些连接器实际响应时（--check-integrations）。

/comments

Apache-2.0GeneralRegulatory

Review open NPRM comment periods, log decisions, track deadlines. Use when an NPRM has a comment window open and you need to surface deadlines, decide whether to file, or record a filing / not-filing / waived decision (--decide CMT-ID).

Comments

MITGeneralRegulatory

Review open NPRM comment periods, log decisions, track deadlines.

Compliance auditor

MITGeneralRegulatory

This skill conducts comprehensive compliance audits across 7 regulatory frameworks using a 57-item checklist with quantitative scoring and remediation guidance. Use when preparing for certification audits (SOC 2, ISO 27001) or regulatory reviews. Also consider when onboarding enterprise customers with compliance requirements. Suggest when annual compliance review cycle begins.

/compliance-check -- Compliance Review

Apache-2.0GeneralRegulatory

Run a compliance check on a proposed action, product feature, or business initiative, surfacing applicable regulations, required approvals, and risk areas. Use when launching a feature that touches personal data, when marketing or product proposes something with regulatory implications, or when you need to know which approvals and jurisdictional requirements apply before proceeding.

Compliance Checklists

MITGeneralRegulatory

Create operational checklists for legal, accessibility, privacy, platform, and product compliance obligations.

Compliance Gap Analysis

MITGeneralRegulatory

Use when a compliance officer, legal team, or external adviser needs to map an organization's current compliance posture against applicable regulatory frameworks — identifying gaps, quantifying severity, and recommending remediation. Covers AML/KYC (FATF 40 Recommendations + Travel Rule), sanctions (OFAC, UN, EU, MENA national lists), data protection (GDPR, KSA PDPL, UAE PDPL, Bahrain, Egypt), anti-bribery (FCPA, UK Bribery Act, MENA laws), ESG/disclosure, and sector-specific frameworks (banking, fintech, insurance, healthcare). Outputs a structured gap register with severity tiers.

Compliance Obligations Mapper

MITGeneralRegulatory

Converts a specific law or regulation's text into an operational obligations register — each obligation, the owner responsible, the trigger that activates it, the evidence needed to demonstrate compliance, the deadline or frequency, and the control that should exist — flagging, where current practice is described, which obligations are and are not yet met. Use for "turn this regulation into an obligations register", "what controls do we need for this new rule", "build an implementation plan for this statute", or "map this regulation to owners and deadlines". Distinct from regulatory-applicability-analyst (determines whether/which rules apply, not how to implement one). Where a dedicated domain skill exists (DPDP, POSH, labour, securities), prefer it; use this one for a regulation with no existing dedicated skill, or a newly enacted one.

Compliance Report Generator — Auditor-Ready Evidence in Minutes

MITGeneralRegulatory

Generate auditor-ready compliance reports with multi-framework control mapping, automated evidence collection strategies, gap analysis, and structured report packages for SOC 2, HIPAA, GDPR, PCI-DSS, and ISO 27001. Reduces audit prep from weeks to days.

Compliance Review

MITGeneralRegulatory

Use when reviewing a change for auditability, personal-data purpose and retention, consent, financial controls, or regulatory traceability gaps.

Regulatory legal-AI skills in General · ThomasMore AI