跳到正文
cccskills
免费在 GitHub 公开

ai-act-readiness

Review an AI system's EU AI Act readiness through six structured questions. Produce an article-cited assessment covering risk classification, conformity checks, organizational obligations, transparency, and general-purpose models, with gaps and three prioritized actions.

中文简介正在准备中。当前显示英语简介。

原文查看原文说明

/compliance-os:ai-act-readiness [system] — EU AI Act 6-question forcing interrogation. Use during AI-system intake, before EU deployment, or during annual compliance refresh as Article 113 obligations phase in (2025-02-02 / 2025-08-02 / 2026-08-02 / 2027-08-02).

实测评分 未实测

查看安装方法

适用场景

  • Reviewing a new or materially changed AI system
  • Checking readiness before an EU launch
  • Refreshing an annual compliance assessment
  • Reassessing obligations after the company's role changes

包含的文件(1)

  • SKILL.md7.3 KB

SKILL.md(原文)

安装前可以查看交给 AI 代理的指令内容。

/compliance-os:ai-act-readiness — EU AI Act Forcing Questions

Command: /compliance-os:ai-act-readiness <system>

The EU AI Act compliance operator pressure-tests any AI system before EU deployment. Six Article-cited questions before any EU placement, conformity assessment, or annual compliance refresh.

When to Run

  • During AI-system intake review (per new system or material change)
  • Before placing an AI system on the EU market
  • Before signing the EU declaration of conformity (Article 47)
  • During annual compliance refresh (Article 113 phasing brings new obligations)
  • When the organization's role changes (deployer becomes provider via Article 25(1) substantial modification)
  • When training compute approaches 10^25 FLOPs (Article 51 systemic-risk threshold)

The Six EU AI Act Questions

1. Article 5: Is this a prohibited AI practice?

Penalty: up to 35M EUR or 7% worldwide turnover.

  • 8 categories: subliminal manipulation, exploitation of vulnerabilities, social scoring, predictive policing, untargeted facial scraping, emotion recognition in workplace/education, biometric categorisation by sensitive attributes, real-time public biometric ID by law enforcement
  • Run ai_system_risk_classifier.py
  • If yes → STOP. Cannot place on EU market. No exceptions outside Article 5(2) carve-outs.

2. Article 6 + Annex III: Is this high-risk?

Annex III triggers high-risk; Article 6(3) carve-out conditional.

  • 8 categories: biometrics, critical infrastructure, education, employment, essential services, law enforcement, migration, justice
  • Carve-out applies only if Article 6(3)(a)-(d) AND no profiling of natural persons
  • Profiling overrides carve-out (Article 6(3) last sentence)
  • Run ai_system_risk_classifier.py

3. Article 43: For high-risk, Module A or Module H?

Biometrics → Module H (notified body) by default; others → Module A if harmonised standards applied.

  • Run conformity_assessment_planner.py
  • Module A (Annex VI): internal control with presumption of conformity if Article 40 harmonised standards applied
  • Module H (Annex VII): full QMS + notified body for biometrics or where standards lacking
  • Annex IV technical documentation: 8 items required before placing on market

4. Article 25: What role does the company play?

Provider obligations are heaviest; substantial modification turns deployer into provider.

  • Provider (Article 3(3)): placed on market; full Title III + Article 73 reporting
  • Deployer (Article 3(4)): Article 26 obligations + Article 27 FRIA if public sector
  • Importer (Article 3(6)): Article 23 verification of conformity
  • Distributor (Article 3(7)): Article 24 CE marking verification
  • Authorized representative (Article 22): non-EU providers must appoint
  • Run ai_act_obligation_tracker.py

5. Article 50: Are transparency obligations satisfied?

In force 2 Aug 2025.

  • Article 50(1): disclose AI interaction to natural persons (chatbots, virtual agents)
  • Article 50(2): mark synthetic content as AI-generated
  • Article 50(3): disclose emotion recognition / biometric categorisation (outside Article 5 prohibitions)
  • Article 50(4): disclose deepfakes (image, audio, video) as AI-generated

6. Articles 51-55: Is this a GPAI? Does it have systemic risk?

GPAI has parallel track; systemic risk above 10^25 FLOPs.

  • Article 3(63): general-purpose AI model definition
  • Article 51: systemic-risk presumption (≥ 10^25 FLOPs training compute) or Commission designation
  • Article 53: all GPAI providers — Annex XI technical docs, Annex XII downstream info, copyright policy, training-data summary
  • Article 55: systemic-risk GPAI additional obligations — model evaluations, adversarial testing, incident reporting, cybersecurity
  • Article 54: non-EU GPAI providers must appoint authorized representative

Workflow

# 1. Risk classification
python ${CLAUDE_PLUGIN_ROOT}/vendor/ra-qm-team/eu-ai-act-specialist/scripts/ai_system_risk_classifier.py systems.json

# 2. If high-risk: conformity assessment
python ${CLAUDE_PLUGIN_ROOT}/vendor/ra-qm-team/eu-ai-act-specialist/scripts/conformity_assessment_planner.py system.json

# 3. Per-role obligation matrix
python ${CLAUDE_PLUGIN_ROOT}/vendor/ra-qm-team/eu-ai-act-specialist/scripts/ai_act_obligation_tracker.py roles.json

# 4. Cross-framework reuse (ISO 42001 etc.)
python ../../skills/compliance-os/scripts/cross_framework_mapper.py program.json

Output Format

# EU AI Act Readiness: <system>
**Date:** YYYY-MM-DD
**Article Citations:** Every verdict below cites the specific Article.

## The Decision Being Made
[classify | conformity-route | obligation-scope | annual-refresh]

## Risk Classification
- Tier: prohibited | high_risk | limited_risk | minimal_risk
- Citation: Article X(Y) + Annex Z if applicable
- Rationale: <Article-cited rationale>
- GPAI: yes/no
- Systemic-risk GPAI: yes/no (per Article 51 10^25 FLOPs threshold)

## Conformity Assessment (if high-risk)
- Module: A | A_with_caveats | H | sectoral
- Citation: Article 43 + Annex VI/VII
- Notified body required: yes | no | optional
- Annex IV pack status: complete | in-progress | not-started

## Obligation Matrix
- Total obligations: N
- By deadline phase: 2025-02-02=A, 2025-08-02=B, 2026-08-02=C (Art. 50), 2027-12-02=D (Annex III high-risk), 2028-08-02=E (Annex I high-risk); dates per Regulation (EU) 2026/1744
- Highest-priority unmet obligation: <Article + description>

## Transparency (Article 50)
- 50(1) interaction disclosure: yes | no
- 50(2) synthetic content marking: yes | no | NA
- 50(3) emotion recognition disclosure: yes | no | NA
- 50(4) deepfake disclosure: yes | no | NA

## Cross-Framework Reuse
- ISO 42001 evidence applicable to Article 17 QMS: yes/no
- ISO 27001 evidence applicable to Article 15 cybersecurity: yes/no
- GDPR DPIA usable for Article 27 FRIA: yes/no

## Verdict
🟢 READY-FOR-EU | 🟡 GAPS-IDENTIFIED | 🔴 NOT-READY | 🚫 PROHIBITED

## Top 3 Actions
[3 concrete next steps with owner + Article-tied deadline]

## Legal Review Required
[Article-level ambiguities flagged for outside counsel: novel cases, GPAI threshold disputes, Article 5 boundary cases, Article 25 substantial-modification questions]

Routing

  • /compliance-os:compliance-readiness — for multi-framework view (combine with ISO 42001 + GDPR)
  • /compliance-os:aims-audit — for ISO 42001 deep-dive
  • /c-level-agents:caio-review — for executive AI strategy decisions
  • /c-level-agents:gc-review — for novel-case legal review (GPAI threshold, Article 5 boundary, substantial-modification)
  • /c-level-agents:decide — to log the verdict
  • /c-level-agents:freeze 30 — on EU launch commitments (regulatory exposure)

Related


Version: 1.0.0

评价

还没有评价。欢迎分享你的使用感受。

评论

无需登录即可发表。欢迎分享使用感受、提问,或说明在哪些环境下无法运行。

还没有评论。来写第一条吧。

提交后会立即公开。请勿填写邮箱、电话等个人信息。URL 最多 2 个。

0 / 1000 字

此表单受 reCAPTCHA 保护,适用 Google 的隐私权政策和服务条款。

同一仓库的技能

Audit web applications for accessibility issues against WCAG 2.2 Level A and AA, the web accessibility standards. Get framework-specific code fixes, contrast checks, verification steps, and reports, with options for automated checks in development pipelines.

中文简介正在准备中。当前显示英语简介。

  • Audit a web application before release
  • Fix contrast and keyboard navigation issues
  • Prepare accessibility reports for stakeholders
alirezarezvani/claude-skills2.9万2026年10月22日 更新

Plan A/B tests that compare page variations, from headlines to pricing layouts. Define a hypothesis, choose success metrics, calculate sample size and duration, and prepare launch checks and results reports to support decisions.

中文简介正在准备中。当前显示英语简介。

  • Comparing landing page headlines
  • Testing signup button changes
  • Planning pricing page experiments
alirezarezvani/claude-skills2.9万2026年10月22日 更新

Create paid ad headlines and body copy tailored to each platform's character limits. Use existing performance data to develop variations, explore new messaging angles, and check copy for length, quality, and potential rejection risks.

中文简介正在准备中。当前显示英语简介。

  • Creating Google RSA headlines
  • Writing Meta and LinkedIn ad copy
  • Developing variations of successful ads
alirezarezvani/claude-skills2.9万2026年10月22日 更新

Review code changes from three critical perspectives: production failures, maintainability, and security. Get a consolidated report that ranks findings by severity and provides merge guidance, helping examine assumptions that an ordinary self-review may overlook.

中文简介正在准备中。当前显示英语简介。

  • Reviewing a pull request before merging
  • Getting a second opinion on AI-written code
  • Checking authentication or data access code
alirezarezvani/claude-skills2.9万2026年10月22日 更新

aeo

免费

Audit and improve content intended for citation in AI answers. Review evidence, author information, and structure, generate revised content and structured metadata, and keep a local record of observed citations across AI services.

中文简介正在准备中。当前显示英语简介。

  • Audit existing articles for evidence and credibility gaps
  • Revise article structure and references for AI answers
  • Record citations observed across AI services
alirezarezvani/claude-skills2.9万2026年10月22日 更新

Create signed records for consequential agent actions such as deployments, deletions, and payments. Decide which actions need evidence, record the agent, action, target, and policy, then verify the resulting certificate offline to detect later changes.

中文简介正在准备中。当前显示英语简介。

  • Creating signed records for production deployments
  • Preserving evidence of deletions and payments
  • Recording access grants for later review
alirezarezvani/claude-skills2.9万2026年10月22日 更新

查看 alirezarezvani 的全部技能

报告此技能的问题