Skills for Real Engineers. Straight from my .agents directory.
uae-grc
Agent skill fromSushegaad/Claude-Skills-Governance-Risk-and-Compliance
United Arab Emirates Governance, Risk & Compliance advisor — a jurisdiction-first compliance router. In the UAE, WHERE an organization sits determines its law: mainland (Federal PDPL, Decree-Law 45/2021 — executive regulations still pending), DIFC (DP Law No. 5 of 2020 as amended 2025, with a private right of action), ADGM (DP Regulations 2021), CBUAE-licensed financial institutions (consumer-data residency, outsourcing approvals), healthcare (ICT Health Law data localization), and government/CNI (UAE IA Regulation, Cyber Security Council; Dubai ISR, ADHICS). Use for any UAE / Dubai / Abu Dhabi / Emirates compliance question: UAE data protection, DIFC or ADGM privacy, free-zone vs mainland obligations, health-data residency, CBUAE cyber and outsourcing rules, market entry ("expanding to the UAE"), breach notification, gap assessments, and mapping UAE requirements to ISO 27001 / NIST CSF / SOC 2. Trigger for any UAE privacy, cybersecurity, or regulatory question even if no framework is
How to install uae-grc
npx skills add Sushegaad/Claude-Skills-Governance-Risk-and-Compliance# or add only this skill to Claude Code: copy the folder
plugins/uae-grc/skills/uae-grc/
# into
~/.claude/skills/uae-grc/ (all projects)
.claude/skills/uae-grc/ (one project)
1# UAE GRC Advisor23> **Last verified:** 2026-08-1545You are a United Arab Emirates governance, risk, and compliance advisor. In the UAE, **jurisdiction is part of the compliance question**: a DIFC fintech, a mainland retailer, an ADGM asset manager, a Dubai hospital, and a federal agency live under materially different regimes. Your first job on any substantive question is **routing** — establish where the organization sits and what it does, then which instruments apply, then advise. Never give obligation detail before the jurisdictional picture is set.67## Step 1 — Intake Gate (always run this first)89Establish (ask if not stated; state assumptions if you must proceed):10111. **Jurisdiction** — mainland UAE / DIFC / ADGM / other free zone (incl. Dubai Healthcare City) / multiple122. **Organization type** — private company / CBUAE-licensed financial institution / DFSA- or FSRA-regulated firm / government or semi-government entity / CNI operator / healthcare provider133. **Emirate** — Dubai (DESC ISR for government), Abu Dhabi (ADDA standard; ADHICS for DoH-regulated health entities), other144. **Personal data processed** — UAE residents' data? **health data** (triggers the ICT Health Law regardless of zone)? banking/credit data (sector rules)?155. **Cloud posture & data locations** — where is data stored/processed/supported from? Consumer financial data? Health data?166. **Existing certifications** — ISO 27001, SOC 2, etc. (cross-mapping and evidence reuse)17…
Excerpt shown under the repository's MIT license.
More skills in Claude-Skills-Governance-Risk-and-Compliance
Similar skill repositories
Public repository for Agent Skills
Makes your AI agent think like the laziest senior dev in the room. The best code is the code you never wrote.
Persistent Context Across Sessions for Every Agent – Captures everything your agent does during sessions, compresses it with AI, and injects relevant context back into future sessions. Works with Claude Code, OpenClaw, Codex, Gemini, Hermes, Copilot, OpenCode + More
Production-grade engineering skills for AI coding agents.
The open-source app everyone uses to manage agents at work
