compliance-tracking — Claude Code skill: what it does, how to install
Tracks compliance requirements and audit readiness across SOC 2, ISO 27001, GDPR, HIPAA and PCI DSS, helping structure control data for upcoming audits.
npx skills add anthropics/knowledge-work-plugins --skill compliance-tracking -a claude-codeWhat compliance-tracking does
The skill works from a table of common frameworks — SOC 2, ISO 27001, GDPR, HIPAA, PCI DSS — and helps build a control inventory, audit calendar, evidence collection plan and gap analysis for each. For SOC 2 that means security and availability, for GDPR consent and breach notification, for HIPAA PHI protection and access controls.
Output includes a compliance status dashboard, a prioritized gap analysis, an audit prep checklist and an evidence collection plan. The SKILL.md structure walks through control inventory, audit calendar, evidence management and gap analysis in order.
The skill does not connect to any actual evidence storage system or verify real controls. It organizes what you feed into it, so the actual control data and deadlines still come from you.
What it helps with
- map controls to SOC 2, ISO 27001 or GDPR requirements
- build an audit calendar with evidence deadlines
- put together an evidence collection plan per control
- run a gap analysis between current state and framework requirements
- draft an audit prep checklist
Example prompts for the agent
- Help me build a gap analysis ahead of our SOC 2 audit
- Draft an audit calendar for ISO 27001 this quarter
- Put together an evidence collection plan for GDPR compliance
How to install compliance-tracking
1Skills CLI (Vercel)
npx skills add anthropics/knowledge-work-plugins --skill compliance-tracking -a claude-code2Manually: put the files in place
~/.claude/skills/compliance-tracking/SKILL.mdCopy the whole skill folder; for one project use .claude/skills/compliance-tracking/
1Skills CLI (Vercel)
npx skills add anthropics/knowledge-work-plugins --skill compliance-tracking -a codex2Manually: put the files in place
.agents/skills/compliance-tracking/SKILL.mdFor all projects use ~/.agents/skills/
1Skills CLI (Vercel)
npx skills add anthropics/knowledge-work-plugins --skill compliance-tracking -a cursor2Manually: put the files in place
.cursor/skills/compliance-tracking/SKILL.mdCursor also reads .agents/skills/ and .claude/skills/
1GitHub CLI
gh skill install anthropics/knowledge-work-plugins compliance-tracking2Manually: put the files in place
.github/skills/compliance-tracking/SKILL.md1Skills CLI (Vercel)
npx skills add anthropics/knowledge-work-plugins --skill compliance-tracking -a gemini-cli2Platform CLI
gemini skills install https://github.com/anthropics/knowledge-work-plugins --path operations/skills/compliance-trackingManually: put the files in place
.devin/skills/compliance-tracking/SKILL.mdThe legacy .windsurf/skills/ path still works
Skills CLI (Vercel)
npx skills add anthropics/knowledge-work-plugins --skill compliance-tracking -a opencodeClaude.ai
Zip the folder and upload it in Settings → Capabilities → Skills
From the same set89
The whole set →Similar
Questions about compliance-tracking
How to install compliance-tracking in Claude Code?
Run npx skills add anthropics/knowledge-work-plugins --skill compliance-tracking -a claude-code. The skill then lives at ~/.claude/skills/compliance-tracking/SKILL.md.
What does compliance-tracking do?
It helps maintain a control inventory, audit calendar, evidence collection plan and gap analysis for compliance work, producing status dashboards and audit prep checklists as output.
Which frameworks does compliance-tracking cover?
It covers SOC 2, ISO 27001, GDPR, HIPAA and PCI DSS, each with its own focus area and key requirements, from security controls to payment card data protection.
Source text
SKILL.md · Apache-2.0
--- name: compliance-tracking description: Track compliance requirements and audit readiness. Trigger with "compliance", "audit prep", "SOC 2", "ISO 27001", "GDPR", "regulatory requirement", or when the user needs help tracking, preparing for, or documenting compliance activities. --- # Compliance Tracking Help track compliance requirements, prepare for audits, and maintain regulatory readiness. ## Common Frameworks | Framework | Focus | Key Requirements | |-----------|-------|-----------------| | SOC 2 | Service organizations | Security, availability, processing integrity, confidentiality, privacy | | ISO 27001 | Information security | Risk assessment, security controls, continuous improvement | | GDPR | Data privacy (EU) | Consent, data rights, breach notification, DPO | | HIPAA | Healthcare data (US) | PHI protection, access controls, audit trails | | PCI DSS | Payment card data | Encryption, access control, vulnerability management | ## Compliance Tracking Components ### Control Inventory - Map controls to framework requirements - Document control owners and evidence - Track control effectiveness ### Audit Calendar - Upcoming audit dates and deadlines - Evidence collection timelines - Remediation deadlines ### Evidence Management - What evidence is needed for each control - Where evidence is stored - When evidence was last collected ### Gap Analysis - Requirements vs. current state - Prioritized remediation plan - Timeline to compliance ## Output Produce compliance status dashboards, gap analyses, audit prep checklists, and evidence collection plans.
© anthropics · Apache-2.0 · anthropics/knowledge-work-plugins