Skip to main content
affpapa.org
RU EN
subagent

compliance-specialist — Claude Code subagent: what it does, install

A Claude Code subagent for compliance reviews, risk work, audit preparation, and security governance.

Install into Claude Code · claude-code-templates All methods and platforms ↓ 
npx claude-code-templates@latest --agent security/compliance-specialist
Open on GitHub

What compliance-specialist does

compliance-specialist reviews regulatory obligations and maps them to security controls. It covers SOX, GDPR, HIPAA, PCI-DSS, and SOC 2, while supporting risk evaluation, policy work, audit evidence, and governance tasks.

The subagent can produce gap assessments, risk registers, control matrices, policy documents, requirement mappings, and training material. Its configuration grants Read, Write, Edit, and Bash, so it can inspect and change files and run commands. That access should be considered before using it in a project. Its workflow includes framework mapping, impact review, control documentation, and audit preparation.

What it helps with

  • map SOX, GDPR, HIPAA, PCI-DSS, or SOC 2 requirements
  • identify gaps in security controls
  • prepare evidence for an audit
  • build a risk register with mitigation actions
  • write security policies and procedures

Example prompts for the agent

  • Assess this project against SOC 2 and write a gap report.
  • Prepare an audit evidence package and a control matrix.
  • Draft security policies and a risk register for this project.

How to install compliance-specialist

1claude-code-templates

npx claude-code-templates@latest --agent security/compliance-specialist

2Manually: put the files in place

.claude/agents/compliance-specialist.md

For all projects use ~/.claude/agents/. Claude delegates by the description field or an @-mention

Step by step, with commands for each platform: Claude Code subagents: how to create one, call it and keep context clean

Questions about compliance-specialist

How do I install compliance-specialist in Claude Code?

Run npx claude-code-templates@latest --agent security/compliance-specialist, then use .claude/agents/compliance-specialist.md.

What does compliance-specialist do?

It reviews regulatory requirements, supports risk assessment, and creates material for policies, governance, and audit preparation.

Which tools can the subagent use?

Its configuration lists Read, Write, Edit, and Bash. Those tools let it work with files and run commands.

Similar subagents

All subagents for Security →
code-reviewer official Anthropic This subagent checks code changes for bugs, security issues, and project-rule violations. Use it when a review should focus on findings that matter. 31,050installs security-auditor official Anthropic This subagent searches code for security flaws and gives engineers concrete fixes. Use it to review a project before hardening or modernization work. 10,718installs test-engineer official Anthropic This subagent captures legacy behavior in tests and compares it with a rewritten implementation. Use it before changing existing modules. 9,715installs code-reviewer VoltAgent Community Reviews code changes for bugs, security flaws and maintenance issues. Use it before merging complex work or auditing a project. 31,050installs security-auditor VoltAgent Community Audits security controls, vulnerabilities, risks, and compliance gaps across systems, infrastructure, and processes. Use it when you need documented findings. 10,718installs devops-engineer VoltAgent Community This subagent reviews infrastructure and helps with CI/CD, containers, and deployment workflows. Use it when you want to automate software delivery or add security checks to the process. 7,392installs

From the same set361

The whole set →
document-structure-analyzer This subagent maps document regions, content hierarchy, and reading order. Use it before OCR when the relationships between headings, tables, and other elements matter. 1,099installs premium-web-design This skill guides Claude Code toward polished React components with distinctive type, composition, color, and motion. Use it for sites, landing pages, and portfolios. 1,090installs agent-memory-systems A skill on agent memory architecture: short-term and long-term stores, vector databases, chunking, and getting the right fact back. 1,086installs connection-agent Scans an Obsidian vault for notes that belong together, flags notes with no links, and writes up link suggestions for you to review. 1,072installs video-downloader This skill pulls videos from YouTube and other platforms onto your disk, at the resolution and format you pick. Handy when a talk or lecture has to be available offline. 1,049installs supabase-data-explorer This command explores Supabase data and schema, runs read-only SQL queries, and prepares exports or visualizations. Use it when database checks belong in the project workflow. 1,032installs test-runner This hook fires a test command right after Claude edits a file. Handy when you keep forgetting to re-run checks by hand. 1,027installs supabase-performance-optimizer A Claude slash command that inspects a Supabase database for slow queries and wasted indexes, then hands back an optimization plan. 1,026installs

Project sponsors

Companies that keep this analytics open
Gold sponsor
Nutra.Club

Impressions, clicks and code copies — open statistics. We keep the numbers public for the same reason NeBlask itself is public. Become a sponsor