What problem does it solve? Compliance work often spans multiple domains at once — security, privacy, accessibility, vulnerability management — and it is unclear which guidance applies or whether a request is even in scope. This Skill acts as a router that maps a broad compliance request to the smallest relevant focused skill set and synthesizes the resulting guidance into concrete engineering controls. ## Core Features & Use Cases - Decision Rubric: Maps prompt signals (PII, CVEs, WCAG, HIPAA, audit evidence) to the right focused compliance-* or threat-model skill. - Applicability Discipline: Prevents premature GDPR/HIPAA labeling by requiring data, actors, and obligation analysis first. - Escalation Clarity: Distinguishes engineering guidance from legal advice and surfaces decisions needing legal, security, or policy owner review. - Use Case: A team building a health-data feature asks whether HIPAA applies and what controls are needed; the router directs them to compliance-hipaa plus compliance-security, then frames the legal review questions. ## Quick Start Use compliance-expert to route this request about storing EU customer data and determine which compliance obligations and controls apply.
