
Compliance OS multi-framework orchestrator
Maps which compliance frameworks apply, their control overlap, mock audits, and a unified evidence checklist
- Repository
- alirezarezvani/claude-skills
- Stars
- 29,149
- Licence
- MIT
- Files
- 13 files
What it does
This skill teaches an AI agent to help a company run several compliance programs (such as ISO 27001, SOC 2, GDPR, EU AI Act) together instead of separately. It can work out which frameworks likely apply to a company profile, show where controls overlap so evidence can be reused, generate a simulated internal audit with findings and interview questions, and build a combined evidence checklist. It does not replace per-framework experts or legal advice.
Great for
- Compliance teams standing up or consolidating a multi-framework program
- Teams preparing for a certification stage 1 or planning an annual audit calendar
- Consultants who want a structured starting point for mock audits and evidence mapping
Skip it if
- Final legal or certification decisions, since the skill's mappings are simplified and must be reviewed with counsel
- Organisations needing detailed per-framework operational work, which the skill itself says is handled by other skills
- Anyone expecting live regulatory data, since the outputs come from embedded curated tables rather than current law
Try asking
- “Use compliance-os to tell me which frameworks apply to our medical-device AI company in the EU”
- “Run the cross-framework mapper for ISO 27001 and SOC 2 and show control overlap”
- “Simulate a mock ISO 27001 internal audit for our platform team scope”
- “Build a unified evidence checklist for ISO 42001, the EU AI Act and GDPR”
Install in 3 steps
- 1
Download the skill
The ZIP contains the 13 original files, the MIT licence and an attribution note.
compliance-os.zip - 2
Add it to your agent
Claude Code (all projects)
mkdir -p ~/.claude/skills && unzip compliance-os.zip -d ~/.claude/skills/Claude Code / Agent SDK (this project only)
mkdir -p .claude/skills && unzip compliance-os.zip -d .claude/skills/Claude apps (web/desktop): Settings → Capabilities → Skills → Upload skill, and choose the ZIP.
- 3
Ask for the task
No special command needed — the agent reads the skill's description and loads it when your request matches. Try one of the prompts above.
Get better results
- Start with the embedded sample runs to see the output format before supplying your own JSON
- Review every mapping and applicability result with a qualified compliance or legal professional before relying on it
- Keep the company profile and evidence files local, since they may contain sensitive business information
What's inside
- assets/company_profile_template.json
- assets/control_library_template.json
- references/audit_simulation_methodology.md
- references/compliance_os_pattern.md
- references/cross_framework_overlap.md
- references/evidence_artifact_reuse_index.md
- references/evidence_management.md
- references/multi_framework_audit_playbook.md
- scripts/audit_simulator.py
- scripts/cross_framework_mapper.py
- scripts/evidence_pool_generator.py
- scripts/framework_selector.py
- SKILL.md
Redistributed unmodified from alirezarezvani/claude-skills under the MIT licence. The assessment was drafted with AI from the skill's files on 2026-10-29. Skills can instruct your agent to run code — read SKILL.md and any scripts before installing.