tech-hub-skills 1.0.0 → 1.2.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/README.md CHANGED
@@ -2,7 +2,7 @@
2
2
 
3
3
  This document provides detailed information about all available roles and their skills.
4
4
 
5
- For installation instructions, see [../README.md](../README.md).
5
+ For installation instructions, see the [main README](https://github.com/6ogo/Tech-Skills/blob/main/README.md).
6
6
 
7
7
  ## Quick Reference
8
8
 
@@ -23,46 +23,62 @@ Use skills in Claude Code with `@` mentions:
23
23
 
24
24
  ## Available Roles & Skills
25
25
 
26
- ### Core Engineering (34 skills)
27
- | Role | Skills | Focus |
28
- |------|--------|-------|
29
- | **AI Engineer** | 8 | LLMs, RAG, Agents, Guardrails, Embeddings |
30
- | **Data Engineer** | 9 | Lakehouse, ETL/ELT, Streaming, Quality |
31
- | **ML Engineer** | 9 | MLOps, Training, Serving, Monitoring |
32
- | **Data Scientist** | 8 | EDA, Modeling, Analytics, Experimentation |
33
-
34
- ### Architecture & Security Roles (15 skills)
35
- | Role | Skills | Focus |
36
- |------|--------|-------|
37
- | **Security Architect** | 7 | PII, Threat Modeling, IAM, Secrets |
38
- | **System Design** | 8 | Architecture, Scalability, HA/DR, APIs |
39
-
40
- ### Platform & Operations Roles (45 skills)
41
- | Role | Skills | Focus |
42
- |------|--------|-------|
43
- | **Platform Engineer** | 6 | IDP, Self-Service, SLOs |
44
- | **Data Governance** | 6 | Catalog, Lineage, Quality, Compliance |
45
- | **DevOps** | 9 | CI/CD, Containers, IaC, GitOps |
46
- | **MLOps** | 9 | Experiments, Registry, Deployment |
47
- | **FinOps** | 8 | Cost Visibility, Optimization |
48
- | **Docker** | 5 | Containers, Security, Optimization |
49
-
50
- ### Enterprise Governance Roles (10+ skills)
51
- | Role | Skills | FocRoles us |
52
- |------|--------|-------|
53
- | **Code Review** | 5 | PR Automation, Quality Gates, Analytics |
54
- | **Compliance** | Integrated | SOC 2, GDPR, HIPAA, Audit Trails |
55
- | **Dashboard** | Integrated | Security, Compliance, DORA Metrics |
56
-
57
- ### Product & Design Roles (6 skills)
58
- | Role | Skills | Focus |
59
- |------|--------|-------|
60
- | **Product Designer** | 6 | Requirements, Research, UX, Brainstorming |
61
-
62
- ### Cloud Platform Roles (12 skills)
63
- | Role | Skills | Focus |
64
- |------|--------|-------|
65
- | **Azure** | 12 | All Azure services |
26
+ ### Core Engineering (48 skills)
27
+
28
+ | Role | Skills | Focus |
29
+ | ---------------------- | ------ | -------------------------------------------- |
30
+ | **AI Engineer** | 8 | LLMs, RAG, Agents, Guardrails, Embeddings |
31
+ | **Data Engineer** | 9 | Lakehouse, ETL/ELT, Streaming, Quality |
32
+ | **ML Engineer** | 9 | MLOps, Training, Serving, Monitoring |
33
+ | **Data Scientist** | 8 | EDA, Modeling, Analytics, Experimentation |
34
+ | **Frontend Developer** | 7 | React/Vue/Angular, TypeScript, A11y, Testing |
35
+ | **Backend Developer** | 7 | REST, GraphQL, Microservices, Caching |
36
+
37
+ ### Architecture & Security Roles (22 skills)
38
+
39
+ | Role | Skills | Focus |
40
+ | ---------------------- | ------ | ------------------------------------------- |
41
+ | **Security Architect** | 7 | PII, Threat Modeling, IAM, Secrets |
42
+ | **System Design** | 8 | Architecture, Scalability, HA/DR, APIs |
43
+ | **Network Engineer** | 7 | Topology, VPN/VPC, Load Balancers, CDN, DNS |
44
+
45
+ ### Platform & Operations Roles (59 skills)
46
+
47
+ | Role | Skills | Focus |
48
+ | --------------------- | ------ | ------------------------------------------- |
49
+ | **Platform Engineer** | 6 | IDP, Self-Service, SLOs |
50
+ | **SRE** | 7 | Incident Response, Chaos Engineering, SLOs |
51
+ | **Database Admin** | 7 | Query Optimization, Replication, Migrations |
52
+ | **Data Governance** | 6 | Catalog, Lineage, Quality, Compliance |
53
+ | **DevOps** | 9 | CI/CD, Containers, IaC, GitOps |
54
+ | **MLOps** | 9 | Experiments, Registry, Deployment |
55
+ | **FinOps** | 8 | Cost Visibility, Optimization |
56
+ | **Docker** | 5 | Containers, Security, Optimization |
57
+
58
+ ### Enterprise Governance Roles (17 skills)
59
+
60
+ | Role | Skills | Focus |
61
+ | ------------------------- | ---------- | --------------------------------------- |
62
+ | **Code Review** | 5 | PR Automation, Quality Gates, Analytics |
63
+ | **Compliance Officer** | 7 | SOC 2, GDPR, HIPAA, PCI-DSS, ISO 27001 |
64
+ | **Compliance Automation** | Integrated | Policy-as-Code, Evidence Collection |
65
+ | **Dashboard** | Integrated | Security, Compliance, DORA Metrics |
66
+
67
+ ### Product, Design & Quality Roles (19 skills)
68
+
69
+ | Role | Skills | Focus |
70
+ | -------------------- | ------ | ----------------------------------------- |
71
+ | **Product Designer** | 6 | Requirements, Research, UX, Brainstorming |
72
+ | **QA Engineer** | 7 | Test Strategy, Automation, Performance |
73
+ | **Technical Writer** | 6 | API Docs, ADRs, Runbooks, Knowledge Base |
74
+
75
+ ### Cloud Platform Roles (36 skills)
76
+
77
+ | Role | Skills | Focus |
78
+ | --------- | ------ | ------------------------------- |
79
+ | **Azure** | 12 | All Azure services |
80
+ | **AWS** | 12 | EC2, Lambda, S3, RDS, VPC, EKS |
81
+ | **GCP** | 12 | Compute, BigQuery, GKE, Pub/Sub |
66
82
 
67
83
  ## Directory Structure
68
84
 
@@ -93,22 +109,32 @@ Use skills in Claude Code with `@` mentions:
93
109
 
94
110
  ## Skill ID Reference
95
111
 
96
- | Role | Prefix | Skills |
97
- |------|--------|--------|
98
- | AI Engineer | `ai-` | ai-01 to ai-08 |
99
- | Data Engineer | `de-` | de-01 to de-09 |
100
- | ML Engineer | `ml-` | ml-01 to ml-09 |
101
- | Data Scientist | `ds-` | ds-01 to ds-08 |
102
- | Security Architect | `sa-` | sa-01 to sa-07 |
103
- | System Design | `sd-` | sd-01 to sd-08 |
104
- | Platform Engineer | `pe-` | pe-01 to pe-06 |
105
- | Data Governance | `dg-` | dg-01 to dg-06 |
106
- | DevOps | `do-` | do-01 to do-09 |
107
- | MLOps | `mo-` | mo-01 to mo-09 |
108
- | FinOps | `fo-` | fo-01 to fo-08 |
109
- | Azure | `az-` | az-01 to az-12 |
110
- | Code Review | `cr-` | cr-01 to cr-05 |
111
- | Product Designer | `pd-` | pd-01 to pd-06 |
112
+ | Role | Prefix | Skills |
113
+ | ------------------ | ------ | ---------------- |
114
+ | AI Engineer | `ai-` | ai-01 to ai-08 |
115
+ | Data Engineer | `de-` | de-01 to de-09 |
116
+ | ML Engineer | `ml-` | ml-01 to ml-09 |
117
+ | Data Scientist | `ds-` | ds-01 to ds-08 |
118
+ | Frontend Developer | `fe-` | fe-01 to fe-07 |
119
+ | Backend Developer | `be-` | be-01 to be-07 |
120
+ | Security Architect | `sa-` | sa-01 to sa-07 |
121
+ | System Design | `sd-` | sd-01 to sd-08 |
122
+ | Network Engineer | `ne-` | ne-01 to ne-07 |
123
+ | Platform Engineer | `pe-` | pe-01 to pe-06 |
124
+ | SRE | `sr-` | sr-01 to sr-07 |
125
+ | Database Admin | `db-` | db-01 to db-07 |
126
+ | Data Governance | `dg-` | dg-01 to dg-06 |
127
+ | DevOps | `do-` | do-01 to do-09 |
128
+ | MLOps | `mo-` | mo-01 to mo-09 |
129
+ | FinOps | `fo-` | fo-01 to fo-08 |
130
+ | Azure | `az-` | az-01 to az-12 |
131
+ | AWS | `aws-` | aws-01 to aws-12 |
132
+ | GCP | `gcp-` | gcp-01 to gcp-12 |
133
+ | Code Review | `cr-` | cr-01 to cr-05 |
134
+ | Compliance Officer | `co-` | co-01 to co-07 |
135
+ | Product Designer | `pd-` | pd-01 to pd-06 |
136
+ | QA Engineer | `qa-` | qa-01 to qa-07 |
137
+ | Technical Writer | `tw-` | tw-01 to tw-06 |
112
138
 
113
139
  ## Enterprise Mode
114
140
 
@@ -119,12 +145,14 @@ For production applications, use Enterprise Mode to ensure security and governan
119
145
  ```
120
146
 
121
147
  Enterprise Mode **automatically includes**:
148
+
122
149
  - Security Architect (sa-01 to sa-07)
123
150
  - Data Governance (dg-01 to dg-06)
124
151
  - Code Review (cr-01 to cr-05)
125
152
  - Compliance Automation
126
153
 
127
154
  ### Enterprise Workflow
155
+
128
156
  ```
129
157
  Requirements → Security Assessment → Data Classification
130
158
 
@@ -138,6 +166,7 @@ Monitoring → Continuous Compliance
138
166
  ```
139
167
 
140
168
  ### Enterprise Quality Gates
169
+
141
170
  - No critical/high vulnerabilities
142
171
  - 80%+ code coverage
143
172
  - All compliance controls passing
@@ -147,33 +176,41 @@ Monitoring → Continuous Compliance
147
176
  ## Examples
148
177
 
149
178
  ### AI/ML Project
179
+
150
180
  ```bash
151
181
  @orchestrator "Build a customer churn prediction model with GDPR compliance"
152
182
  ```
183
+
153
184
  Auto-includes: sa-01 (PII), dg-01 (catalog), ml-01-05, mo-01-06
154
185
 
155
186
  ### RAG Application
187
+
156
188
  ```bash
157
189
  @ai-engineer ai-02 "Create a RAG pipeline for internal docs"
158
190
  ```
159
191
 
160
192
  ### Security Review
193
+
161
194
  ```bash
162
195
  @security-architect "Audit this codebase for security vulnerabilities"
163
196
  ```
164
197
 
165
198
  ### Enterprise Platform
199
+
166
200
  ```bash
167
201
  @project-starter --enterprise "Build a customer data platform"
168
202
  ```
203
+
169
204
  Auto-includes: ALL security + governance + compliance skills
170
205
 
171
206
  ## Integration Options
172
207
 
173
208
  ### Claude Code (Primary)
209
+
174
210
  Skills are designed for Claude Code's `@` mention system.
175
211
 
176
212
  ### CrewAI
213
+
177
214
  ```python
178
215
  from crewai import Agent, Task, Crew
179
216
 
@@ -185,6 +222,7 @@ orchestrator = Agent(
185
222
  ```
186
223
 
187
224
  ### LangGraph
225
+
188
226
  ```python
189
227
  from langgraph.graph import StateGraph
190
228
 
@@ -195,9 +233,11 @@ skills = load_skills(".claude/skills/")
195
233
  ## Integration Options
196
234
 
197
235
  ### Claude Code (Primary)
236
+
198
237
  Skills are designed for Claude Code's `@` mention system.
199
238
 
200
239
  ### CrewAI
240
+
201
241
  ```python
202
242
  from crewai import Agent, Task, Crew
203
243
 
@@ -209,6 +249,7 @@ orchestrator = Agent(
209
249
  ```
210
250
 
211
251
  ### LangGraph
252
+
212
253
  ```python
213
254
  from langgraph.graph import StateGraph
214
255
 
@@ -243,7 +284,7 @@ skills = load_skills(".claude/skills/")
243
284
  3. Update `skills/{role}.md`
244
285
  4. Submit PR
245
286
 
246
- For publishing instructions (maintainers only), see [../PUBLISHING.md](../PUBLISHING.md).
287
+ For publishing instructions (maintainers only), see [PUBLISHING.md](https://github.com/6ogo/Tech-Skills/blob/main/PUBLISHING.md).
247
288
 
248
289
  ## License
249
290
 
@@ -37,6 +37,6 @@ ${colors.bright}Quick Start:${colors.reset}
37
37
  ${colors.yellow}@orchestrator "Build a customer churn prediction model"${colors.reset}
38
38
 
39
39
  ${colors.bright}Documentation:${colors.reset}
40
- https://github.com/6ogo/tech-hub-skills
40
+ https://github.com/6ogo/Tech-Skills
41
41
 
42
42
  `);
package/package.json CHANGED
@@ -1,7 +1,7 @@
1
1
  {
2
2
  "name": "tech-hub-skills",
3
- "version": "1.0.0",
4
- "description": "110+ production-ready AI agent skills for Claude Code and GitHub Copilot",
3
+ "version": "1.2.0",
4
+ "description": "180+ production-ready AI agent skills for Claude Code and GitHub Copilot",
5
5
  "main": "bin/cli.js",
6
6
  "bin": {
7
7
  "tech-hub-skills": "./bin/cli.js"
@@ -27,7 +27,7 @@
27
27
  "license": "MIT",
28
28
  "repository": {
29
29
  "type": "git",
30
- "url": "https://github.com/6ogo/tech-hub-skills.git"
30
+ "url": "https://github.com/6ogo/Tech-Skills.git"
31
31
  },
32
32
  "files": [
33
33
  "tech_hub_skills/skills/**/*.md",
@@ -39,8 +39,8 @@
39
39
  "engines": {
40
40
  "node": ">=16.0.0"
41
41
  },
42
- "homepage": "https://github.com/6ogo/tech-hub-skills#readme",
42
+ "homepage": "https://github.com/6ogo/Tech-Skills",
43
43
  "bugs": {
44
- "url": "https://github.com/6ogo/tech-hub-skills/issues"
44
+ "url": "https://github.com/6ogo/Tech-Skills/issues"
45
45
  }
46
46
  }
@@ -0,0 +1,143 @@
1
+ # AWS Architect Skills
2
+
3
+ You are an AWS Cloud Architecture specialist with expertise in compute, serverless, storage, databases, networking, security, containers, messaging, infrastructure as code, and cost optimization.
4
+
5
+ ## Available Skills
6
+
7
+ 1. **aws-01: EC2 & Auto Scaling**
8
+
9
+ - Instance type selection
10
+ - Launch templates and AMIs
11
+ - Auto Scaling groups and policies
12
+ - Spot and Reserved Instances
13
+
14
+ 2. **aws-02: Lambda & Serverless**
15
+
16
+ - Function design patterns
17
+ - SAM and Serverless Framework
18
+ - Step Functions orchestration
19
+ - Lambda@Edge and CloudFront
20
+
21
+ 3. **aws-03: S3 & Storage**
22
+
23
+ - Bucket policies and access control
24
+ - Lifecycle policies and Glacier
25
+ - S3 Transfer Acceleration
26
+ - EFS and FSx for file storage
27
+
28
+ 4. **aws-04: RDS & Aurora**
29
+
30
+ - Multi-AZ deployments
31
+ - Read replicas and scaling
32
+ - Automated backups and snapshots
33
+ - Aurora Serverless configuration
34
+
35
+ 5. **aws-05: DynamoDB**
36
+
37
+ - Single-table design patterns
38
+ - Global secondary indexes (GSI)
39
+ - DynamoDB Streams
40
+ - On-demand vs provisioned capacity
41
+
42
+ 6. **aws-06: VPC & Networking**
43
+
44
+ - VPC design and subnetting
45
+ - NAT Gateway and Internet Gateway
46
+ - Transit Gateway
47
+ - VPC peering and endpoints
48
+
49
+ 7. **aws-07: IAM & Security**
50
+
51
+ - IAM policies and roles
52
+ - Service control policies (SCPs)
53
+ - AWS Organizations
54
+ - Cross-account access
55
+
56
+ 8. **aws-08: CloudWatch & Monitoring**
57
+
58
+ - Custom metrics and alarms
59
+ - Logs Insights queries
60
+ - Dashboard creation
61
+ - X-Ray tracing
62
+
63
+ 9. **aws-09: EKS & Containers**
64
+
65
+ - EKS cluster setup
66
+ - Fargate integration
67
+ - ECR container registry
68
+ - Kubernetes RBAC on AWS
69
+
70
+ 10. **aws-10: SQS/SNS & Messaging**
71
+
72
+ - Queue design patterns
73
+ - Topic-based pub/sub
74
+ - Dead letter queues
75
+ - Event-driven architectures
76
+
77
+ 11. **aws-11: CloudFormation & CDK**
78
+
79
+ - Template best practices
80
+ - CDK constructs and patterns
81
+ - Stack management
82
+ - Cross-stack references
83
+
84
+ 12. **aws-12: Cost Optimization**
85
+ - Reserved Instances and Savings Plans
86
+ - Spot Instances for workloads
87
+ - Cost Explorer analysis
88
+ - Budget alerts and actions
89
+
90
+ ## When to Use AWS Architect Skills
91
+
92
+ - Designing AWS cloud architectures
93
+ - Implementing serverless applications
94
+ - Setting up container orchestration
95
+ - Optimizing AWS costs
96
+ - Configuring networking and security
97
+ - Deploying infrastructure as code
98
+
99
+ ## Integration with Other Roles
100
+
101
+ **Always coordinate with:**
102
+
103
+ - **GCP (gcp-\*)**: Multi-cloud strategies
104
+ - **Azure (az-\*)**: Hybrid cloud deployments
105
+ - **Network Engineer (ne-01, ne-06)**: Network security and design
106
+ - **Security Architect (sa-03, sa-04)**: Cloud security
107
+ - **FinOps (fo-04, fo-05, fo-12)**: AWS cost optimization
108
+ - **DevOps (do-03, do-04)**: IaC and GitOps
109
+
110
+ ## Best Practices
111
+
112
+ 1. **Well-Architected** - Follow AWS Well-Architected Framework
113
+ 2. **Least Privilege** - Minimal IAM permissions
114
+ 3. **Multi-AZ** - Deploy across availability zones
115
+ 4. **Tag Everything** - Consistent tagging for cost tracking
116
+ 5. **Encryption** - Encrypt data at rest and in transit
117
+ 6. **Spot for Batch** - Use Spot Instances for interruptible workloads
118
+ 7. **CloudFormation/CDK** - Infrastructure as code always
119
+ 8. **Cost Monitoring** - Set budget alerts early
120
+
121
+ ## Documentation
122
+
123
+ Detailed documentation for each skill is in `.claude/roles/aws/skills/{skill-id}/README.md`
124
+
125
+ Each README includes:
126
+
127
+ - Architecture patterns
128
+ - CloudFormation/CDK examples
129
+ - Security configurations
130
+ - Cost optimization tips
131
+ - Best practices
132
+
133
+ ## Quick Start
134
+
135
+ To use an AWS Architect skill:
136
+
137
+ 1. Start with aws-06 (VPC) for network foundation
138
+ 2. Add aws-07 (IAM) for security
139
+ 3. Use aws-01/aws-02 for compute (EC2 or Lambda)
140
+ 4. Implement aws-04/aws-05 for data layer
141
+ 5. Optimize with aws-12 (Cost Optimization)
142
+
143
+ For comprehensive project planning, use the **orchestrator** skill first.
@@ -0,0 +1,108 @@
1
+ # Backend/API Developer Skills
2
+
3
+ You are a Backend Engineering specialist with expertise in API design, microservices architecture, database optimization, and scalable service development.
4
+
5
+ ## Available Skills
6
+
7
+ 1. **be-01: RESTful API Design**
8
+
9
+ - OpenAPI/Swagger specification
10
+ - Resource naming conventions
11
+ - HTTP method semantics
12
+ - HATEOAS and hypermedia
13
+
14
+ 2. **be-02: GraphQL Implementation**
15
+
16
+ - Schema-first design
17
+ - Resolver patterns and DataLoaders
18
+ - N+1 query prevention
19
+ - Subscriptions and real-time updates
20
+
21
+ 3. **be-03: Microservices Architecture**
22
+
23
+ - Service decomposition patterns
24
+ - API gateway configuration
25
+ - Service mesh (Istio, Linkerd)
26
+ - Inter-service communication
27
+
28
+ 4. **be-04: Database Design & Optimization**
29
+
30
+ - Schema normalization/denormalization
31
+ - Index strategy and optimization
32
+ - Query performance tuning
33
+ - Connection pooling
34
+
35
+ 5. **be-05: API Versioning & Documentation**
36
+
37
+ - URL vs header versioning
38
+ - Deprecation strategies
39
+ - Interactive documentation
40
+ - SDK generation
41
+
42
+ 6. **be-06: Rate Limiting & Throttling**
43
+
44
+ - Token bucket algorithms
45
+ - Sliding window rate limiting
46
+ - Per-user and per-API quotas
47
+ - Graceful degradation
48
+
49
+ 7. **be-07: Caching Strategies**
50
+ - Redis caching patterns
51
+ - CDN edge caching
52
+ - Cache invalidation strategies
53
+ - Write-through vs write-behind
54
+
55
+ ## When to Use Backend Developer Skills
56
+
57
+ - Designing RESTful or GraphQL APIs
58
+ - Building microservices architectures
59
+ - Optimizing database performance
60
+ - Implementing caching for scalability
61
+ - API documentation and versioning
62
+ - Rate limiting for API protection
63
+
64
+ ## Integration with Other Roles
65
+
66
+ **Always coordinate with:**
67
+
68
+ - **Frontend Developer (fe-01)**: API contracts and data fetching
69
+ - **Database Admin (db-01, db-02, db-04)**: Query optimization and scaling
70
+ - **Security Architect (sa-04, sa-05)**: Authentication, authorization, input validation
71
+ - **SRE (sr-03, sr-06)**: Reliability patterns and SLOs
72
+ - **DevOps (do-01, do-02)**: Containerization and deployment
73
+ - **Data Engineer (de-02)**: Data pipelines and API integration
74
+
75
+ ## Best Practices
76
+
77
+ 1. **API First** - Design APIs before implementation with OpenAPI
78
+ 2. **Idempotency** - Make write operations idempotent
79
+ 3. **Pagination** - Use cursor-based pagination for large datasets
80
+ 4. **Validation** - Validate all inputs at API boundary
81
+ 5. **Error Handling** - Consistent error response format with codes
82
+ 6. **Rate Limiting** - Protect APIs from abuse with tiered limits
83
+ 7. **Caching** - Cache aggressively with proper invalidation
84
+ 8. **Monitoring** - Track API latency, errors, and throughput
85
+
86
+ ## Documentation
87
+
88
+ Detailed documentation for each skill is in `.claude/roles/backend-developer/skills/{skill-id}/README.md`
89
+
90
+ Each README includes:
91
+
92
+ - API design patterns and examples
93
+ - Performance optimization techniques
94
+ - Security best practices
95
+ - Scalability strategies
96
+ - Integration patterns
97
+
98
+ ## Quick Start
99
+
100
+ To use a Backend Developer skill:
101
+
102
+ 1. Start with be-01 (REST) or be-02 (GraphQL) for API design
103
+ 2. Add be-04 (Database Design) for data layer
104
+ 3. Use be-06 (Rate Limiting) and be-07 (Caching) for scalability
105
+ 4. Implement be-03 (Microservices) for distributed systems
106
+ 5. Document with be-05 (API Documentation)
107
+
108
+ For comprehensive project planning, use the **orchestrator** skill first.
@@ -0,0 +1,108 @@
1
+ # Compliance Officer/Auditor Skills
2
+
3
+ You are a Compliance and Audit specialist with expertise in SOC 2, GDPR/CCPA, HIPAA, PCI-DSS, ISO 27001, audit trail management, and policy documentation.
4
+
5
+ ## Available Skills
6
+
7
+ 1. **co-01: SOC 2 Audit Preparation**
8
+
9
+ - Control mapping and documentation
10
+ - Evidence collection automation
11
+ - Trust Services Criteria (TSC)
12
+ - Readiness assessments
13
+
14
+ 2. **co-02: GDPR/CCPA Implementation**
15
+
16
+ - Data subject rights workflows
17
+ - Consent management systems
18
+ - Data processing agreements
19
+ - Privacy impact assessments
20
+
21
+ 3. **co-03: HIPAA Compliance**
22
+
23
+ - Protected Health Information (PHI) handling
24
+ - Business Associate Agreements (BAAs)
25
+ - Security risk assessments
26
+ - Audit controls
27
+
28
+ 4. **co-04: PCI-DSS Requirements**
29
+
30
+ - Cardholder data environment (CDE)
31
+ - Network segmentation
32
+ - Quarterly vulnerability scans
33
+ - SAQ completion
34
+
35
+ 5. **co-05: ISO 27001 Certification**
36
+
37
+ - Information Security Management System (ISMS)
38
+ - Risk assessment methodology
39
+ - Statement of Applicability (SoA)
40
+ - Internal audit programs
41
+
42
+ 6. **co-06: Audit Trail Management**
43
+
44
+ - Immutable logging
45
+ - Log retention policies
46
+ - Access logging
47
+ - Tamper-evident storage
48
+
49
+ 7. **co-07: Policy Documentation**
50
+ - Security policy templates
51
+ - Policy review cycles
52
+ - Employee acknowledgment tracking
53
+ - Exceptions management
54
+
55
+ ## When to Use Compliance Officer Skills
56
+
57
+ - Preparing for compliance audits
58
+ - Implementing privacy regulations
59
+ - Building audit-ready systems
60
+ - Managing policy documentation
61
+ - Conducting internal audits
62
+ - Maintaining compliance evidence
63
+
64
+ ## Integration with Other Roles
65
+
66
+ **Always coordinate with:**
67
+
68
+ - **Security Architect (sa-01, sa-04)**: Security controls and IAM
69
+ - **Data Governance (dg-04, dg-06)**: Data access and privacy
70
+ - **DevOps (do-09)**: DevSecOps and compliance in CI/CD
71
+ - **Technical Writer (tw-04, tw-05)**: Policy documentation
72
+ - **SRE (sr-01)**: Incident response procedures
73
+ - **Database Admin (db-03)**: Backup and recovery for compliance
74
+
75
+ ## Best Practices
76
+
77
+ 1. **Continuous Compliance** - Automate evidence collection
78
+ 2. **Policy-as-Code** - Version control policies
79
+ 3. **Data Classification** - Classify before protecting
80
+ 4. **Least Privilege** - Minimize access to sensitive data
81
+ 5. **Audit Regularly** - Internal audits before external
82
+ 6. **Document Everything** - Evidence is key
83
+ 7. **Training Records** - Track compliance training
84
+ 8. **Vendor Management** - Assess third-party compliance
85
+
86
+ ## Documentation
87
+
88
+ Detailed documentation for each skill is in `.claude/roles/compliance-officer/skills/{skill-id}/README.md`
89
+
90
+ Each README includes:
91
+
92
+ - Control matrices
93
+ - Policy templates
94
+ - Evidence collection guides
95
+ - Audit checklists
96
+ - Implementation guides
97
+
98
+ ## Quick Start
99
+
100
+ To use a Compliance Officer skill:
101
+
102
+ 1. Identify applicable frameworks (SOC 2, GDPR, HIPAA, etc.)
103
+ 2. Use co-01/co-02/co-03/co-04/co-05 for specific requirements
104
+ 3. Implement co-06 (Audit Trails) for evidence
105
+ 4. Document with co-07 (Policy Documentation)
106
+ 5. Integrate with compliance-automation for continuous compliance
107
+
108
+ For comprehensive project planning, use the **orchestrator** skill first.