Is this a replacement for a legal review?

While it provides deep technical insights into data flow and license compatibility, it is intended to assist developers and should be reviewed by legal professionals for final regulatory approval.

How does it handle data privacy?

It traces user data through the frontend, backend, and observability layers, specifically identifying where PII is handled and what data is being sent to external AI APIs.

What are the available scopes for the check?

You can target your audit by specifying a scope: 'licenses', 'privacy', 'ai-ethics', or 'full' for a comprehensive project-wide check.

What licenses does the compliance check flag?

The skill identifies all project dependencies and specifically flags restrictive copyleft licenses such as GPL and AGPL, as well as checking for specific attribution requirements.

Can this skill fix compliance issues automatically?

No, it is an auditing tool that produces a detailed compliance report with priority-ordered action items so developers can make informed decisions and manual changes.

Compliance Check & AI Ethics

Name: Compliance Check & AI Ethics
Author: yu-iskw

byyu-iskw

•

セキュリティとテスト

Audits project dependencies for license compatibility, traces PII for data privacy, and evaluates AI ethical standards.

This skill provides a comprehensive auditing framework for software projects, ensuring they meet legal, privacy, and ethical benchmarks. It automates the tedious process of checking dependency licenses to flag restrictive terms like GPL, mapping sensitive data flows to identify PII risks, and reviewing AI agent behavior for bias and transparency. Whether you are adding new libraries or preparing for a regulatory review, this skill generates actionable reports with priority-ordered remediation steps to mitigate legal risks and maintain high development standards.

主な機能

01License compatibility auditing for project dependencies

023 GitHub stars

03AI ethics and guardrail evaluation for LLM-powered features

04Automated flagging of restrictive copyleft licenses (GPL/AGPL)

05PII data flow tracing through frontend, backend, and AI agents

06Comprehensive compliance reports with Pass/Fail status and action items

ユースケース

01Preparing applications for GDPR or CCPA audits by tracing user data handling

02Evaluating the legal risk and attribution requirements of new third-party libraries

03Auditing AI agent implementations for bias, transparency, and safety guardrails

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add yu-iskw/software-development-team-plugin compliance-check

For use in Claude.ai and ChatGPT

主な機能

01License compatibility auditing for project dependencies

023 GitHub stars

03AI ethics and guardrail evaluation for LLM-powered features

04Automated flagging of restrictive copyleft licenses (GPL/AGPL)

05PII data flow tracing through frontend, backend, and AI agents

06Comprehensive compliance reports with Pass/Fail status and action items

ユースケース

01Preparing applications for GDPR or CCPA audits by tracing user data handling

02Evaluating the legal risk and attribution requirements of new third-party libraries

03Auditing AI agent implementations for bias, transparency, and safety guardrails

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add yu-iskw/software-development-team-plugin compliance-check

For use in Claude.ai and ChatGPT