BeClaude

compliance-copilot

New
1GitHub TrendingGeneralby ESR-style

Open-source compliance skill pack for Claude Code, OpenCode, and other AI CLIs. Adds DPDP, GDPR, CCPA, HIPAA, and PCI-DSS knowledge + codebase scanning to any agentic AI assistant.

First seen 6/21/2026

Summary

This skill equips Claude Code with knowledge of major data privacy and security regulations (DPDP, GDPR, CCPA, HIPAA, PCI-DSS) and enables automated codebase scanning for compliance gaps.

  • It helps developers identify and remediate compliance issues directly within their development workflow, reducing legal risk and audit preparation time.

Install & Usage

1
Create the skills directory
mkdir -p .claude/skills
2
Download the skill file
mkdir -p .claude/skills && curl -o .claude/skills/compliance-copilot.md https://raw.githubusercontent.com/ESR-style/compliance-copilot/main/SKILL.md
3
Invoke in Claude Code
/compliance-copilot

Use Cases

Scan a codebase for hardcoded secrets or PII that may violate GDPR or CCPA.
Review a new feature's data handling logic for HIPAA compliance before deployment.
Generate a compliance checklist for a project handling credit card data under PCI-DSS.
Audit data retention policies in code comments and configuration files against DPDP requirements.
Identify missing consent mechanisms or privacy notices in a web application's frontend code.
Validate that API endpoints handling personal data implement proper encryption and access controls.

Usage Examples

1

/compliance-copilot scan my-project/ for GDPR violations

2

Check this codebase for PCI-DSS compliance issues related to storing cardholder data

3

Review the user registration flow in auth.js for CCPA privacy notice requirements

View source on GitHub
agent

Security Audits

LicenseUnknownSourceWarnRepositoryPass

Frequently Asked Questions

What is compliance-copilot?

This skill equips Claude Code with knowledge of major data privacy and security regulations (DPDP, GDPR, CCPA, HIPAA, PCI-DSS) and enables automated codebase scanning for compliance gaps. It helps developers identify and remediate compliance issues directly within their development workflow, reducing legal risk and audit preparation time.

How to install compliance-copilot?

To install compliance-copilot: create the skills directory (mkdir -p .claude/skills), then run: mkdir -p .claude/skills && curl -o .claude/skills/compliance-copilot.md https://raw.githubusercontent.com/ESR-style/compliance-copilot/main/SKILL.md. Finally, /compliance-copilot in Claude Code.

What is compliance-copilot best for?

compliance-copilot is a skill categorized under General. It is designed for: agent. Created by ESR-style.

What can I use compliance-copilot for?

compliance-copilot is useful for: Scan a codebase for hardcoded secrets or PII that may violate GDPR or CCPA.; Review a new feature's data handling logic for HIPAA compliance before deployment.; Generate a compliance checklist for a project handling credit card data under PCI-DSS.; Audit data retention policies in code comments and configuration files against DPDP requirements.; Identify missing consent mechanisms or privacy notices in a web application's frontend code.; Validate that API endpoints handling personal data implement proper encryption and access controls..