compliance-copilot
NewOpen-source compliance skill pack for Claude Code, OpenCode, and other AI CLIs. Adds DPDP, GDPR, CCPA, HIPAA, and PCI-DSS knowledge + codebase scanning to any agentic AI assistant.
Summary
This skill equips Claude Code with knowledge of major data privacy and security regulations (DPDP, GDPR, CCPA, HIPAA, PCI-DSS) and enables automated codebase scanning for compliance gaps.
- It helps developers identify and remediate compliance issues directly within their development workflow, reducing legal risk and audit preparation time.
Install & Usage
mkdir -p .claude/skillsmkdir -p .claude/skills && curl -o .claude/skills/compliance-copilot.md https://raw.githubusercontent.com/ESR-style/compliance-copilot/main/SKILL.md/compliance-copilotUse Cases
Usage Examples
/compliance-copilot scan my-project/ for GDPR violations
Check this codebase for PCI-DSS compliance issues related to storing cardholder data
Review the user registration flow in auth.js for CCPA privacy notice requirements
Security Audits
Frequently Asked Questions
What is compliance-copilot?
This skill equips Claude Code with knowledge of major data privacy and security regulations (DPDP, GDPR, CCPA, HIPAA, PCI-DSS) and enables automated codebase scanning for compliance gaps. It helps developers identify and remediate compliance issues directly within their development workflow, reducing legal risk and audit preparation time.
How to install compliance-copilot?
To install compliance-copilot: create the skills directory (mkdir -p .claude/skills), then run: mkdir -p .claude/skills && curl -o .claude/skills/compliance-copilot.md https://raw.githubusercontent.com/ESR-style/compliance-copilot/main/SKILL.md. Finally, /compliance-copilot in Claude Code.
What is compliance-copilot best for?
compliance-copilot is a skill categorized under General. It is designed for: agent. Created by ESR-style.
What can I use compliance-copilot for?
compliance-copilot is useful for: Scan a codebase for hardcoded secrets or PII that may violate GDPR or CCPA.; Review a new feature's data handling logic for HIPAA compliance before deployment.; Generate a compliance checklist for a project handling credit card data under PCI-DSS.; Audit data retention policies in code comments and configuration files against DPDP requirements.; Identify missing consent mechanisms or privacy notices in a web application's frontend code.; Validate that API endpoints handling personal data implement proper encryption and access controls..