Regulatory legal-AI skills in General

83 legal AI skills for regulatory in General.

Compliance Summary

Apache-2.0GeneralRegulatory

Generates structured compliance summaries assessing regulatory posture, identifying gaps, and producing prioritized remediation roadmaps across finance (SEC, FINRA), healthcare (HIPAA, FDA), environmental (EPA), and data privacy (GDPR, CCPA) sectors. Use when drafting regulatory compliance reports, audit readiness assessments, or governance documents for executives, boards, or regulators. For sector-specific depth, defer to dedicated sibling skills (environmental-regulation-summaries, hipaa-privacy-notice, fcpa-compliance-policy, etc.).

Compliance Tracking

MITGeneralRegulatory

Regulatory compliance monitoring skill for tracking legal and regulatory requirements. Use when the user needs assistance with compliance calendars, regulatory tracking, audit preparation, compliance reporting, or regulatory change management. Triggers on keywords like "compliance", "regulatory", "audit", "filing deadline", "compliance calendar", "regulatory change", "compliance report", "annual report", "periodic filing".

Compliance Trestle Engineering

Apache-2.0GeneralRegulatory

Use Compliance Trestle to manage OSCAL catalogs, profiles, component definitions, SSPs, markdown assembly, validation, and source-traceable updates from legacy compliance documents.

/cs:compliance-readiness — Compliance Officer Forcing Questions

MITGeneralRegulatory

/cs:compliance-readiness <program> — Multi-framework compliance officer 6-question forcing interrogation of any compliance program. Use before starting a new framework, planning the annual audit calendar, or preparing for certification stage 1.

/customize

Apache-2.0GeneralRegulatory

Guided customization of your AI governance practice profile — change one thing without re-running the whole cold-start interview. Adjust risk posture, escalation contacts, use-case registry entries, vendor AI positions, AI policy commitments, impact-assessment house style, or matter workspace paths. Use when the user says "change my [thing]", "update my profile", "edit my config", "tune my playbook", or "customize".

/customize

Apache-2.0GeneralRegulatory

Guided customization of your regulatory practice profile — change one thing without re-running the whole cold-start interview. Adjust watched regulators, policy library index, materiality threshold, gap response process, feed configuration, or matter workspace paths. Use when the user says "change my [thing]", "add a regulator", "update my watchlist", "edit my threshold", or "customize".

Design Compliance Risk Assessment

MITGeneralRegulatory

Use when an organization needs to identify and prioritize its regulatory and compliance risk exposure on an ongoing basis — scoring the likelihood and impact of specific compliance failures across applicable regulations, rather than relying only on one-off contract reviews or a general risk-management process that isn't specifically structured around regulatory obligations.

Draft — Compliance Manual

MITGeneralRegulatory

Use when asked to draft a compliance manual for a regulated business — a comprehensive internal policy document covering regulatory framework, roles and responsibilities (compliance officer, MLRO, board), key policies (AML, sanctions, data, conduct), training, reporting and escalation, audit, and sanction protocols. Applicable to financial services, fintech, professional services firms, and any business subject to MENA, EU, or US regulatory oversight.

Drata Inspector Expert

MITGeneralRegulatory

Interpret drata-inspector findings generated from drata-cli workflows and turn Drata control, monitor, evidence, personnel, and integration posture into GRC action.

ESG Policy Framework

MITGeneralRegulatory

Use when drafting an ESG (Environmental, Social, and Governance) policy framework for a company — covering environmental commitments, social responsibility, governance standards, stakeholder engagement, sustainability reporting, and alignment with applicable ESG standards such as TCFD, GRI, SASB, and ISSB. Applicable across MENA (where Vision 2030, UAE Net Zero 2050, and regulatory ESG requirements are driving adoption), EU (CSRD, SFDR), UK, and internationally. Trigger when a company needs to articulate and document its ESG commitments for investors, regulators, or reporting purposes.

Ethics conflict check

MITGeneralRegulatory

Spot ethics, disclosure, gift, recusal, personal-interest, or appearance issues in a proposed city action.

Evaluate AI Compliance Engine

MITGeneralRegulatory

Evaluate AI Compliance Engine — measure check accuracy, evidence quality, framework coverage, risk scoring calibration, false positive/negative rate. Use when: evaluate, audit compliance.

Feature Risk Assessment

Apache-2.0GeneralRegulatory

Deeper risk assessment for a single feature or product area when the launch review found something that needs more than a line item. Structured analysis: what could go wrong, how likely, how bad, what mitigates it. Use when user says "deep dive on this risk", "risk assessment for [feature]", "what could go wrong with", or when launch-review flags a novel issue.

Gap Surfacer

Apache-2.0GeneralRegulatory

Reference: shared gap- and comment-tracker framework backing /regulatory-legal:gaps and /regulatory-legal:comments. Tracks open policy gaps with remediation status, ingests gaps from policy-diff, surfaces what's open and aging, routes to owners, and notifies gap owners via Slack with per-send confirmation. Loaded by the gaps and comments skills before doing substantive work.

Gap Surfacer

MITGeneralRegulatory

Reference: shared gap- and comment-tracker framework backing /regulatory-legal:gaps and /regulatory-legal:comments.

Governance, Risk & Compliance (GRC) — Master Index

MITGeneralRegulatory

Use this skill as the entry point when the software requires regulatory compliance, data protection, information security, or auditing. Routes to the specific sub-skill based on the applicable regulation. All sub-skills apply regardless of geographic location.

ISO 42001 AI Management System (AIMS) Skill

MITGeneralRegulatory

Expert ISO 42001 AI Management System (AIMS) compliance advisor. Use this skill whenever a user asks about ISO/IEC 42001:2023, AI governance, AI management systems, AI risk assessment, AI system impact assessment, Annex A controls for AI, Statement of Applicability for AI systems, AI policy, responsible AI, AI lifecycle management, AI incident management, AI transparency, AI bias, AI certification readiness, or any topic related to implementing or auditing an AI Management System. Also trigger for questions like "how do I become ISO 42001 certified?", "what controls does ISO 42001 require?", "how do I assess AI risk under 42001?", "what is an AIMS?", or any request involving organisational governance of AI systems, responsible AI frameworks, or AI regulatory compliance aligned to an ISO standard.

ISO/IEC 42001 AI Management System Specialist

MITGeneralRegulatory

ISO/IEC 42001:2023 AI Management System (AIMS) specialist for compliance teams running internal audits. Three decisions: (1) Where are the gaps against Clauses 4-10 and what do we close first? (2) What goes in the AI risk register and which Annex A controls treat each risk? (3) What's the 12-month internal audit plan that satisfies Clause 9.2? Use when preparing for certification, scoping internal audit cycles, or onboarding AI systems into an existing ISMS (27001) / QMS (13485) program. NOT an executive AI strategy skill (see chief-ai-officer-advisor). NOT EU AI Act compliance (see compliance-team-eu-ai-act).

Launch review

Apache-2.0GeneralRegulatory

Full launch review against your framework and risk calibration. Use when the user says "review this launch", "legal review for [feature]", "can we ship this", "what are the legal issues with [product]", or references a launch tracker ticket or PRD that needs a category-by-category review memo.

Legal readiness

MITGeneralRegulatory

Build or adversarially audit an evidence-first legal-readiness system for a software product, SaaS, AI app, API, marketplace, or website. Inventory every public and contractual claim; determine jurisdiction, operator, customer, data-role, payment-channel, and product-behavior applicability; compare prose with repository, live, vendor, registry, contract, and operational evidence; close authorized code/documentation gaps; and leave counsel, tax, filing, entity, and external-account blockers explicit. Use when asked for a legal audit, legal shield, SaaS legal baseline, terms/privacy/consent/payment review, compliance gap analysis, legal readiness, legal standing setup, product-claim substantiation, or to make an app legally safer before launch. NOT FOR giving legal advice, declaring a product compliant or legally secure, forming an entity, filing registrations or taxes, signing contracts, inventing operator facts, or replacing licensed counsel.

Licence Application Drafter

MITGeneralRegulatory

Prepare regulator-facing licence, permit, authorisation, approval, registration, renewal, variation, and change-of-control applications. Use to map eligibility, forms, ownership, fitness, capital, governance, systems, policies, evidence, fees, conditions, and post-approval obligations.

Licensing Requirements Lookup

MITGeneralRegulatory

Use when a business or its advisors need to identify every license required to operate a specific business activity in a specific jurisdiction — covering commercial licenses, sector-specific regulatory licenses (financial, healthcare, food, education, legal, accounting), professional licenses, and ancillary compliance requirements (labor, data protection, environmental). MENA-first: covers UAE (onshore + DIFC + ADGM + free zones), KSA, Lebanon, and Egypt with sector-level regulator details.

Lodge Recon

MITGeneralRegulatory

Survey pending and required regulatory filings.

Matter workspace

Apache-2.0GeneralRegulatory

Birden çok müvekkil/iş/regülasyon projesi için ayrı matter workspace oluşturur, listeler, aktif hale getirir veya arşivler.