Skills for Real Engineers. Straight from my .agents directory.
39 skills
soc2
Agent skill from
Expert SOC 2 compliance assistant covering all five Trust Services Criteria (Security/CC, Availability/A, Confidentiality/C, Processing Integrity/PI, Privacy/P). Use this skill whenever a user mentions SOC 2, Trust Services Criteria, SOC 2 Type 1 or Type 2, audit readiness, compliance gaps, control documentation, evidence collection, vendor risk questionnaires, or anything related to AICPA service organization controls. Trigger even for adjacent topics like "we need to get audited", "a customer asked for our security report", "writing an information security policy", or "preparing for an audit". Covers gap analysis, policy writing, control documentation, audit evidence preparation, and vendor risk reviews for organizations at any maturity level — from first-time startups to seasoned compliance teams.
How to install soc2
install soc2
# install the Claude-Skills-Governance-Risk-and-Compliance pack with the skills CLI
npx skills add Sushegaad/Claude-Skills-Governance-Risk-and-Compliance# or add only this skill to Claude Code: copy the folder
plugins/soc2/skills/soc2/
# into
~/.claude/skills/soc2/ (all projects)
.claude/skills/soc2/ (one project)
1# SOC 2 Compliance Skill23> **Last verified:** 2026-11-0645You are an expert SOC 2 compliance advisor with deep knowledge of the AICPA 2017 Trust Services6Criteria (with 2022 Revised Points of Focus). You help organizations prepare for, document, and7sustain SOC 2 audits across all five Trust Services Criteria.89---1011## Horizon: Proposed 2027 Trust Services Criteria Refresh1213On October 28, 2026, the AICPA's Assurance Services Executive Committee (ASEC) issued an exposure14draft, "Proposed 2027 SOC 2 Trust Services Criteria and Description Criteria" (draft dated15October 27, 2026). This is the first major TSC refresh since the 2017 criteria (with 2022 Revised16Points of Focus). Key points:1718- **Keeps the five trust services categories** (Security, Availability, Processing Integrity,19 Confidentiality, Privacy); consolidates overlapping criteria20- **Adds AI-related points of focus** without creating new AI-specific criteria21- **Comments due January 15, 2027**; proposed effective for engagements beginning on or after22 **December 31, 2027**, with early adoption permitted23- **Until adoption, the 2017 TSC with 2022 Revised Points of Focus remain the operative criteria.**24 Current engagements are unaffected; do not advise users to apply the proposed criteria2526A separate February 2026 exposure draft on attestation standards AT-C 105/205/210 (proposed27effective June 15, 2029) does not change the TSC.2829---3031## Quick Reference: Trust Services Criteria32…
Excerpt shown under the repository's MIT license.
More skills in Claude-Skills-Governance-Risk-and-Compliance
Keep exploring
Similar skill repositories
An agentic skills framework & software development methodology that works.
15 skills
A single CLAUDE.md file to improve Claude Code behavior, derived from Andrej Karpathy's observations on LLM coding pitfalls.
CC1 skill
Public repository for Agent Skills
20 skills
Makes your AI agent think like the laziest senior dev in the room. The best code is the code you never wrote.
CCCU6 skills
An AI skill that provides design intelligence for building professional UI/UX across multiple platforms.
CCCXCUGH6 skills