Skip to main content
skill Claude Code CX Codex Cursor GitHub Copilot official · Anthropic

compliance-tracking — Claude Code skill: what it does, how to install

Tracks compliance requirements and audit readiness across SOC 2, ISO 27001, GDPR, HIPAA and PCI DSS, helping structure control data for upcoming audits.

Install into Claude Code · Skills CLI (Vercel) All methods and platforms ↓
npx skills add anthropics/knowledge-work-plugins --skill compliance-tracking -a claude-code
Open on GitHub

What compliance-tracking does

The skill works from a table of common frameworks — SOC 2, ISO 27001, GDPR, HIPAA, PCI DSS — and helps build a control inventory, audit calendar, evidence collection plan and gap analysis for each. For SOC 2 that means security and availability, for GDPR consent and breach notification, for HIPAA PHI protection and access controls.

Output includes a compliance status dashboard, a prioritized gap analysis, an audit prep checklist and an evidence collection plan. The SKILL.md structure walks through control inventory, audit calendar, evidence management and gap analysis in order.

The skill does not connect to any actual evidence storage system or verify real controls. It organizes what you feed into it, so the actual control data and deadlines still come from you.

What it helps with

  • map controls to SOC 2, ISO 27001 or GDPR requirements
  • build an audit calendar with evidence deadlines
  • put together an evidence collection plan per control
  • run a gap analysis between current state and framework requirements
  • draft an audit prep checklist

Example prompts for the agent

  • Help me build a gap analysis ahead of our SOC 2 audit
  • Draft an audit calendar for ISO 27001 this quarter
  • Put together an evidence collection plan for GDPR compliance

How to install compliance-tracking

1Skills CLI (Vercel)

npx skills add anthropics/knowledge-work-plugins --skill compliance-tracking -a claude-code

2Manually: put the files in place

~/.claude/skills/compliance-tracking/SKILL.md

Copy the whole skill folder; for one project use .claude/skills/compliance-tracking/

From the same set89

The whole set →
data-visualization official anthropics Selects chart types based on data structure and produces Python visualization code in matplotlib, seaborn, and plotly. Useful for reports and research figures. Claude Code CX Codex Cursor +1 13,700installs documentation official anthropics A skill for technical writing that drafts READMEs, API references, runbooks, architecture docs and onboarding guides. Useful when the code exists but the description does not. Claude Code CX Codex Cursor +1 10,300installs build-dashboard official anthropics Builds a self-contained HTML dashboard with Chart.js charts, KPI cards, and filterable tables. Useful for turning raw data or queries into a standalone browser report. Claude Code CX Codex Cursor +1 9,100installs memory-management official anthropics This skill organizes workplace shorthand, names, and project details into files an agent can consult. It fits projects where requests rely on an internal vocabulary and shared context. Claude Code CX Codex Cursor +1 7,400installs task-management official anthropics Tracks commitments, active work, and follow-ups in a local TASKS.md file. Useful when managing project to-dos directly from the AI coding chat. Claude Code CX Codex Cursor +1 7,200installs architecture official anthropics Writes an Architecture Decision Record or reviews a system design: options, trade-offs, consequences. Useful when you have to pick between technologies. Claude Code CX Codex Cursor +1 6,700installs knowledge-synthesis official anthropics Merges search results across chats, emails, and documents into deduplicated answers with source attribution. Flags conflicting facts and scores source reliability. Claude Code CX Codex Cursor +1 6,400installs testing-strategy official anthropics This skill designs testing strategies and test plans for a project. Use it when you need test types, coverage goals, or gaps in existing checks. Claude Code CX Codex Cursor +1 6,400installs

Similar

security-review official github Reviews code and dependencies for vulnerabilities, exposed secrets, and access-control flaws. Use it before a release or when auditing a project path. GitHub Copilot 5,500installs golang-dependency-management samber This skill manages Go dependencies, version conflicts, module audits, and vulnerability checks. Use it when changing go.mod or reviewing a package before adoption. Claude Code CX Codex Cursor +1 39,700installs claude-security official Anthropic Scans repositories or pull request diffs for vulnerabilities and prepares verified patch files. Helpful for security audits directly inside your Claude Code session. Claude Code 2,304installs deployment-pipeline-design Seth Hobson Designs staged CI/CD pipelines with approvals, security checks and rollout strategies. Use it for canary, blue-green and rollback planning. Claude Code CX Codex Cursor 13,758installs stripe-integration Seth Hobson This skill covers Stripe Checkout, subscriptions, webhooks, refunds, and saved payment methods. Use it when a project needs one-time or recurring payments. Claude Code CX Codex Cursor 13,404installs secrets-management Seth Hobson This skill sets up secrets handling for CI/CD with Vault, AWS Secrets Manager, and platform stores. Use it for credentials, rotation, and protected deployments. Claude Code CX Codex Cursor 13,122installs git-guardrails-claude-code Matt Pocock This skill adds a Claude Code hook that stops risky Git commands before they run. Use it when an agent must not push or discard working-tree changes. Claude Code 499,069installs ponytail-review DietrichGebert ponytail-review reviews a change beyond the diff, checking connected code, bugs, risks, load, tests, speed, and unnecessary code. Use it for PRs and commits. Claude Code CX Codex Cursor +1 56,300installs

Questions about compliance-tracking

How to install compliance-tracking in Claude Code?

Run npx skills add anthropics/knowledge-work-plugins --skill compliance-tracking -a claude-code. The skill then lives at ~/.claude/skills/compliance-tracking/SKILL.md.

What does compliance-tracking do?

It helps maintain a control inventory, audit calendar, evidence collection plan and gap analysis for compliance work, producing status dashboards and audit prep checklists as output.

Which frameworks does compliance-tracking cover?

It covers SOC 2, ISO 27001, GDPR, HIPAA and PCI DSS, each with its own focus area and key requirements, from security controls to payment card data protection.

Source text

SKILL.md · Apache-2.0
---
name: compliance-tracking
description: Track compliance requirements and audit readiness. Trigger with "compliance", "audit prep", "SOC 2", "ISO 27001", "GDPR", "regulatory requirement", or when the user needs help tracking, preparing for, or documenting compliance activities.
---

# Compliance Tracking

Help track compliance requirements, prepare for audits, and maintain regulatory readiness.

## Common Frameworks

| Framework | Focus | Key Requirements |
|-----------|-------|-----------------|
| SOC 2 | Service organizations | Security, availability, processing integrity, confidentiality, privacy |
| ISO 27001 | Information security | Risk assessment, security controls, continuous improvement |
| GDPR | Data privacy (EU) | Consent, data rights, breach notification, DPO |
| HIPAA | Healthcare data (US) | PHI protection, access controls, audit trails |
| PCI DSS | Payment card data | Encryption, access control, vulnerability management |

## Compliance Tracking Components

### Control Inventory
- Map controls to framework requirements
- Document control owners and evidence
- Track control effectiveness

### Audit Calendar
- Upcoming audit dates and deadlines
- Evidence collection timelines
- Remediation deadlines

### Evidence Management
- What evidence is needed for each control
- Where evidence is stored
- When evidence was last collected

### Gap Analysis
- Requirements vs. current state
- Prioritized remediation plan
- Timeline to compliance

## Output

Produce compliance status dashboards, gap analyses, audit prep checklists, and evidence collection plans.

© anthropics · Apache-2.0 · anthropics/knowledge-work-plugins

See also

Project sponsors

Companies that keep this analytics open
Gold sponsor

Impressions, clicks and code copies — open statistics. We keep the numbers public for the same reason NeBlask itself is public. Become a sponsor