Expert third-party risk management (TPRM) advisor — a vendor risk analyst for the full lifecycle: risk-based vendor tiering, tailored due-diligence questionnaires (SIG-style or mapped to ISO 27001, SOC 2, DORA, NIS2, HIPAA), SOC 2 Type II report review (exceptions, carve-outs, CUECs, bridge letters), DPA and sub-processor review under GDPR Art. 28, contract security addenda (DORA Art. 30 provisions), ongoing monitoring programmes, and vendor offboarding. Use this skill whenever a user mentions vendor risk, supplier due diligence, third-party assessments, security questionnaires, reviewing a vendor's SOC 2 report, vendor tiering, fourth parties or sub-processors, supply chain security requirements, DORA ICT third-party rules, business associate agreements, or exit/termination of a vendor. Also trigger for 'a customer sent us a questionnaire' and 'how do I assess this vendor' style requests.
日本語の概要は準備中です。原文の説明を表示しています。
Sushegaad/Claude-Skills-Governance-Risk-and-Compliance☆ 9592026年10月10日 更新
Expert DORA (Regulation (EU) 2022/2554 — Digital Operational Resilience Act) compliance advisor for EU financial entities. Use this skill whenever a user asks about DORA compliance, ICT risk management frameworks, ICT incident classification or reporting, threat-led penetration testing (TLPT), ICT third-party risk management, Register of Information, contractual provisions with ICT providers, ICT concentration risk, oversight of critical ICT third-party service providers (CTPPs), or any DORA RTS/ITS obligation. Also trigger for: "DORA gap analysis", "DORA readiness", "Art. 6 ICT risk framework", "Art. 17 incident reporting", "Art. 26 TLPT", "Art. 28 third-party policy", "Art. 30 contractual provisions", "Register of Information CIR 2024/2956", "critical TPSP designation", "DORA vs NIS2", "DORA simplified framework", or EBA/ESMA/EIOPA digital resilience guidance.
日本語の概要は準備中です。原文の説明を表示しています。
Sushegaad/Claude-Skills-Governance-Risk-and-Compliance☆ 9592026年10月10日 更新
Expert TSA cybersecurity compliance advisor for critical infrastructure owners and operators. Use this skill whenever a user asks about TSA Security Directives for pipelines, freight railroads, passenger rail, public transit, or bus operators; the TSA Cyber Risk Management Program (CRMP); Cybersecurity Implementation Plan (CIP); Cybersecurity Operational Implementation Plan (COIP); Cybersecurity Assessment Plan (CAP); incident reporting to CISA; designation of a Cybersecurity Coordinator; Critical Cyber Systems (CCS); OT/IT network segmentation; the TSA November 2024 NPRM; or any directive in the SD Pipeline-2021 series, SD 1580-21-01 (freight rail), or SD 1582-21-01 (public transit/passenger rail). Also trigger for questions like "are we covered by TSA directives?", "what does the TSA require for pipeline cybersecurity?", "how do I build a CIP?", "what must I report to CISA?", or any request involving transportation critical infrastructure cybersecurity compliance.
日本語の概要は準備中です。原文の説明を表示しています。
Sushegaad/Claude-Skills-Governance-Risk-and-Compliance☆ 9592026年10月10日 更新
Add GitHub skill repos to the ASM index: clone, audit, eval, regenerate index, rebuild catalog, open PR. Use when given GitHub URLs to onboard. Don't use for refreshing indexed repos (refresh-index), improving skills (skill-creator), or install.
日本語の概要は準備中です。原文の説明を表示しています。
luongnv89/asm☆ 9572026年10月14日 更新
Sync every enabled repo in the curated skill index and open a confirmation-gated PR. Use when refreshing already-indexed sources. Don't use for adding new repos, improving a single skill, or installing skills locally.
日本語の概要は準備中です。原文の説明を表示しています。
luongnv89/asm☆ 9572026年10月14日 更新
A Yahoo Finance (yfinance) powered financial analysis tool. Get real-time quotes, generate technical indicator reports (RSI/MACD/Bollinger/VWAP/ATR), summarize fundamentals, and run a one-shot report that outputs a text summary.
日本語の概要は準備中です。原文の説明を表示しています。
freestylefly/wesight☆ 9492026年10月2日 更新
Help the user turn their Retentioneering ideas, friction reports, bug findings, or feature needs into high-quality upstream contributions: from capturing and validating the idea, through minimal reproductions and issue drafts, to preparing, testing, and submitting a pull request that follows this repository's conventions. Use when the user says they found a bug, wants a feature, wrote a workaround worth upstreaming, or asks how to contribute, open an issue, or make a PR to retentioneering-tools.
日本語の概要は準備中です。原文の説明を表示しています。
retentioneering/retentioneering-tools☆ 9332026年10月15日 更新
Generate market research reports for scientific and biotech sectors
日本語の概要は準備中です。原文の説明を表示しています。
paperclipai/companies☆ 9212026年3月24日 更新
Generate structured clinical reports from patient and study data
日本語の概要は準備中です。原文の説明を表示しています。
paperclipai/companies☆ 9212026年3月24日 更新
Report-only QA — same browser-based testing as qa but documents bugs with screenshots and repro steps only, no code changes. Health score formula weighted across 8 categories. Outputs to .gstack/qa-reports/.
日本語の概要は準備中です。原文の説明を表示しています。
paperclipai/companies☆ 9212026年3月24日 更新
Translate product specs (PRDs, user stories) into a ship-ready repo plan: ticket decomposition, branch strategy, and PR sequencing. Use when breaking a PRD into tickets or designing the branch/PR sequence.
日本語の概要は準備中です。原文の説明を表示しています。
borghei/Claude-Skills☆ 9152026年10月7日 更新
Senior PM for enterprise software and SaaS — portfolio management, quantitative risk analysis, prioritization, and executive reporting. Use for portfolio health reviews, board-ready status reports, and multi-project risk/capacity analysis.
日本語の概要は準備中です。原文の説明を表示しています。
borghei/Claude-Skills☆ 9152026年10月7日 更新
NIS2 Directive (EU 2022/2555) compliance for critical infrastructure entities, covering the 10 minimum security measures. Use for NIS2 compliance assessments, entity scope analysis, supply chain security, and incident reporting readiness.
日本語の概要は準備中です。原文の説明を表示しています。
borghei/Claude-Skills☆ 9152026年10月7日 更新
Marketing analytics covering campaign analysis, attribution and marketing mix modeling, ROI measurement, and performance reporting. Use when analyzing campaign ROI, comparing attribution models, or optimizing budget allocation.
日本語の概要は準備中です。原文の説明を表示しています。
borghei/Claude-Skills☆ 9152026年10月7日 更新
Data analysis across SQL, visualization, statistics, and reporting. Use when writing SQL queries, building dashboards, performing cohort or funnel analysis, running hypothesis tests, or presenting data-driven recommendations.
日本語の概要は準備中です。原文の説明を表示しています。
borghei/Claude-Skills☆ 9152026年10月7日 更新
Financial leadership advisor on financial planning, fundraising, investor reporting, and unit economics. Use when building a financial model, preparing for fundraising, calculating unit economics, or managing cash runway.
日本語の概要は準備中です。原文の説明を表示しています。
borghei/Claude-Skills☆ 9152026年10月7日 更新
Report content quality trends from logged evals, with regression alerts. "is our content quality improving"
日本語の概要は準備中です。原文の説明を表示しています。
indranilbanerjee/digital-marketing-pro☆ 8892026年10月12日 更新
Generate a branded PDF report: executive summary, campaign or channel review. "export this as a branded PDF"
日本語の概要は準備中です。原文の説明を表示しています。
indranilbanerjee/digital-marketing-pro☆ 8892026年10月12日 更新
Read the GSC AI Performance report by script: AI Overviews and AI Mode impressions. "read the new GSC AI report"
日本語の概要は準備中です。原文の説明を表示しています。
indranilbanerjee/digital-marketing-pro☆ 8892026年10月12日 更新
Report on the brand intelligence base: confident learnings, patterns, playbooks, gaps. "what have we learned across campaigns"
日本語の概要は準備中です。原文の説明を表示しています。
indranilbanerjee/digital-marketing-pro☆ 8892026年10月12日 更新
Use when deploying changes to staging across relay, relay-dashboard, and relay-cloud repos - coordinates multi-repo branch syncing using git worktrees, automatically triggers staging deployments via GitHub Actions
日本語の概要は準備中です。原文の説明を表示しています。
AgentWorkforce/relay☆ 8842026年10月15日 更新
When the user wants to figure out which marketing actually drives conversions and revenue, choose or interpret an attribution model, or reconcile conflicting numbers across tools. Also use when the user mentions "attribution," "attribution model," "first-touch vs last-touch," "multi-touch," "which channel drives revenue," "what's my real CAC," "my dashboards disagree," "Google/Meta says X but GA says Y," "media mix model," "MMM," "incrementality," "geo lift," "holdout test," "how did you hear about us," "self-reported attribution," "dark social," or wants to instrument attribution themselves — "stitch my bookings to their source," "SavvyCal/Calendly attribution," "close the identify gap," "track conversions on a third-party domain," "first-party / self-hosted attribution." For event tracking setup and UTMs, see analytics. For ad-platform pixels/CAPI, see ads. For pipeline and CRM revenue reporting, see revops. For the AI-search attribution blind spot, see ai-seo.
日本語の概要は準備中です。原文の説明を表示しています。
Nexus-JPF/note-companion☆ 8692026年10月13日 更新
Use and read this skill immediately if the user request is in any way related to SEO or a site's organic search or AI search presence. That includes site audits, rankings, keyword research, competitors, backlinks, click or traffic changes, indexing problems, crawling, redirects, sitemaps, metadata, structured data, Core Web Vitals, internal links, content opportunities, programmatic SEO, local search, Search Console or Google Analytics questions, Google update impact, llms.txt, AI search visibility in ChatGPT, Claude, Perplexity, or Google AI Overviews, and client SEO reporting. Routes to evidence-backed local reports through the SEO CLI and MCP server.
日本語の概要は準備中です。原文の説明を表示しています。
Nexus-JPF/note-companion☆ 8692026年10月13日 更新
Expert TSA cybersecurity compliance advisor for critical infrastructure owners and operators. Use this skill whenever a user asks about TSA Security Directives for pipelines, freight railroads, passenger rail, public transit, or bus operators; the TSA Cyber Risk Management Program (CRMP); Cybersecurity Implementation Plan (CIP); Cybersecurity Operational Implementation Plan (COIP); Cybersecurity Assessment Plan (CAP); incident reporting to CISA; designation of a Cybersecurity Coordinator; Critical Cyber Systems (CCS); OT/IT network segmentation; the TSA November 2024 NPRM; or any directive in the SD Pipeline-2021 series, SD 1580-21-01 (freight rail), or SD 1582-21-01 (public transit/passenger rail). Also trigger for questions like "are we covered by TSA directives?", "what does the TSA require for pipeline cybersecurity?", "how do I build a CIP?", "what must I report to CISA?", or any request involving transportation critical infrastructure cybersecurity compliance.
日本語の概要は準備中です。原文の説明を表示しています。
lawve-ai/awesome-legal-skills☆ 8662026年10月3日 更新