Skill UI

Prepares codebases for Trail of Bits security reviews by setting goals, running static analysis, expanding test coverage, pruning dead code, documenting build scope/access, and generating flowcharts, user stories, glossaries, and other reviewer-ready artifacts.

Prepares codebases for Trail of Bits security reviews by setting goals, running static analysis, expanding test coverage, pruning dead code, documenting build scope/access, and generating flowcharts, user stories, glossaries, and other reviewer-ready artifacts.

Automates HIPAA compliance checks across codebases, infrastructure configurations, and documentation by leveraging the hipaa-compliance-checker plugin to flag privacy, security, and access-control risks for projects handling PHI.

This guide details how to implement robust Role-Based Access Control (RBAC) and manage teams within Documenso Enterprise. It covers defining granular roles (Owner, Admin, Member), integrating Single Sign-On (SSO) using OIDC, setting up audit logging, and handling multi-tenant architectures using dedicated API keys. Essential for building large-scale, secure, enterprise-grade document management systems.

This guide details how to implement and handle Documenso webhooks for real-time document lifecycle notifications. Learn to set up secure webhook endpoints to receive critical events—such as document creation, signing completion, rejection, or opening. Use this when you need to trigger automated downstream workflows (e.g., updating CRMs, sending alerts, or logging audit trails) based on any status change in a document signing process.

Automates compliance and security audit reporting for standards such as PCI DSS, HIPAA, SOC 2, and ISO 27001 by using the compliance-report-generator plugin to collect details, format documentation, and streamline regulatory proof.

Provides ISO 27001 ISMS audit and certification guidance, covering program planning, risk-based execution, Annex A control assessment, finding management, and Stage 1/Stage 2 documentation support for compliance teams.

A comprehensive guide for achieving compliance with the EU MDR 2017/745. It covers crucial aspects including medical device classification (Annex VIII), developing technical documentation (Annex II/III), planning clinical evaluation (CER), and establishing post-market surveillance (PMS/PSUR) systems. Ideal for regulatory specialists preparing for Notified Body audits or needing to gap-check technical files.

This guide provides comprehensive documentation and code examples for integrating OpenEvidence webhooks. Learn how to subscribe to real-time events (e.g., query completion, evidence updates, new citations) to keep clinical decision support systems fresh. Use these webhooks to trigger downstream audit workflows and ensure immediate data synchronization.

Automates Claude Code plugin audits whenever audit or security keywords appear, checking for vulnerabilities, compliance with CLAUDE.md standards, marketplace/MCP requirements, best practices, documentation, and repository hygiene before emitting a structured report.

A comprehensive guide for designing and managing document control systems for ISO 13485-compliant Quality Management Systems (QMS), specifically tailored for the medical device industry. This resource covers document numbering, version control, change management workflows, approval processes, and ensures compliance with rigorous standards like 21 CFR Part 11, including electronic signatures and audit trails.

Implements and maintains ISO 13485 QMS for medical device organizations, covering gap analysis, documentation control, internal audits, supplier qualification, and CAPA tracking to keep regulatory programs audit-ready.