GDPR and AI Act compliance skills

Overview

Each skill writes down how an experienced practitioner approaches one piece of governance, risk and compliance work: scope, statement of applicability, risk register, audit prep, evidence, vendors, policies, privacy, AI systems, incidents and continuity. The agent drafts, gathers and cross-checks; the judgments (scope, risk acceptance, signing) stay with a person.

The 60 skills are split into ten categories of six. They are plain SKILL.md files, usable by Claude Code, Codex, Cursor or any agent that reads this format. They do not reproduce the text of standards. The README also offers a single prompt that ranks the ten most useful skills and writes a 30-day plan.

Highlights

• 60 skills in ten categories: gap and readiness, statement of applicability, risk, audit, evidence, vendors, policies, privacy, AI systems, incidents and continuity.
• Every skill has rules that keep decisions with a person: it never accepts a risk, approves a document or signs on anyone’s behalf.
• A plain SKILL.md format, installable with the npx skills add command, by cloning a release, or as a Claude Code plugin.
• Skills work with the reader’s own files and tools and, according to the README, never send data off the machine, download or run code, or read credentials.
• Installs are pinned to a published release; a validator checks every pull request and maintainers review every file before a release.

Who it is for

For people who work on governance, risk and compliance and want an agent to draft and prepare the paperwork (the repository lists ISO 27001, NIS 2, DORA, GDPR and the EU AI Act among its topics) while keeping the decisions.

Installation

Three routes given in the README, all pinned to the published release v2026.10.20.3: the npx skills add command, cloning the release, or the Claude Code plugin (marketplace). The plugin includes an optional MCP entry that asks you to sign in on first use.

npx skills add better-isms/grcskills#v2026.10.20.3

git clone --branch v2026.10.20.3 https://github.com/better-isms/grcskills

/plugin marketplace add better-isms/grcskills

Read the README on GitHub

Points of attention

• Skills draft and prepare, people decide; the README states they are working aids, not legal advice and not an audit opinion.
• The skills contain no text from the standards: official texts must be obtained from their publishers.
• The plugin’s optional MCP entry (framework lookups) asks you to sign in on first use; you can decline it and keep working.

Can an agent use it?

Agent-ready

The repository is built for agents: skills in SKILL.md format, AGENTS.md and CLAUDE.md at the root, a Claude Code plugin and an optional MCP entry. The README states compatibility with Claude Code, Codex and Cursor.