Skip to content

About

No description, website, or topics provided.

Resources

Security policy

Stars

0 stars

Watchers

0 watching

Forks

ย 
ย 

Repository files navigation

SafeAI-Global Compliance Suite ๐Ÿ›ก๏ธ

5 AI-Powered Compliance Skills for Product Managers โ€” covering 35+ jurisdictions, ISO standards, and flexible compliance depth

License: MIT Security Audit skills.sh Version


๐ŸŽฏ What is This?

A suite of 5 specialized compliance skills that transform any AI assistant (Gemini, Claude, ChatGPT, Copilot, Cursor...) into a Compliance-Aware Product Manager. It generates PRDs with built-in security checks, regulatory mapping, and actionable engineering checklists.

๐ŸŽ›๏ธ Step 0: The Compliance Depth Selector

Not every PRD needs full compliance. To prevent over-engineering simple features, the agent asks you to choose your depth at the start of every chat:

Level Mode Name Best For What Happens
๐ŸŸข ๐Ÿ“ Standard PRD MVPs, internal tools, fast iteration Generates a clean, standard PRD โ€” no compliance scanning.
๐ŸŸก ๐Ÿ›ก๏ธ Smart Compliance (Default) Products going to production Auto-detects region and applies only the relevant local laws.
๐Ÿ”ด ๐Ÿ”’ Full Compliance Audit Enterprise, strictly regulated industries Full audit: All jurisdictions + ISO 27001/42001 + SOC 2 + WCAG.

Tip: You don't have to wait for the bot to ask. Just say "Standard PRD" or "Full compliance for EU" in your very first prompt to skip Step 0.


๐Ÿ“ฆ Available Skills

# Skill Focus For Who
๐ŸŒ SafeAI-Global PRD Agent 35+ jurisdictions, cross-border transfers, AI governance All Product Managers
๐Ÿ‡ช๐Ÿ‡บ SafeAI GDPR Expert GDPR Art-by-Art, EU AI Act risk classification, DPIA EU market PMs
๐Ÿฅ SafeAI HIPAA Expert HIPAA safeguards, FDA SaMD, PHI handling HealthTech PMs
๐Ÿ’ณ SafeAI FinTech Compliance PCI-DSS v4.0, PSD2/SCA, AML/KYC, Open Banking FinTech PMs
๐ŸŒ SafeAI ASEAN Data Protection VN, SG, TH, MY, ID, PH country deep-dives ASEAN startups

๐Ÿ”— How They Connect

The SafeAI-Global suite uses a Hub-and-Spoke architecture to ensure your AI agent doesn't suffer from "context dilution".

               โ”Œโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”
               โ”‚    ๐ŸŒ SafeAI-Global PRD Agent (Hub)     โ”‚
               โ”‚   โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€       โ”‚
               โ”‚   โ€ข Covers 35+ Jurisdictions            โ”‚
               โ”‚   โ€ข Cross-border Data Transfers         โ”‚
               โ”‚   โ€ข Defines AI Governance               โ”‚
               โ””โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”ฌโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”˜
                                   โ”‚
              [ Step 0: Auto-Detects Region & Depth ]
                                   โ”‚
       โ”Œโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”ฌโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”ดโ”€โ”€โ”€โ”ฌโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”ฌโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”
       โ–ผ               โ–ผ               โ–ผ               โ–ผ               โ–ผ
โ”Œโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ” โ”Œโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ” โ”Œโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ” โ”Œโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ” โ”Œโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”
โ”‚ ๐Ÿ‡ช๐Ÿ‡บ GDPR     โ”‚ โ”‚ ๐Ÿฅ HIPAA    โ”‚ โ”‚ ๐Ÿ’ณ FinTech  โ”‚ โ”‚ ๐ŸŒ ASEAN    โ”‚ โ”‚ ๐Ÿ“ Standard โ”‚
โ”‚   Expert    โ”‚ โ”‚   Expert    โ”‚ โ”‚ Compliance  โ”‚ โ”‚  Data Prot. โ”‚ โ”‚    PRD      โ”‚
โ”œโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”ค โ”œโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”ค โ”œโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”ค โ”œโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”ค โ”œโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”ค
โ”‚ โ€ข Art-by-Artโ”‚ โ”‚ โ€ข FDA SaMD  โ”‚ โ”‚ โ€ข PCI-DSS   โ”‚ โ”‚ โ€ข VN, SG, THโ”‚ โ”‚ โ€ข No Legal  โ”‚
โ”‚ โ€ข EU AI Act โ”‚ โ”‚ โ€ข PHI Safeguโ”‚ โ”‚ โ€ข PSD2/SCA  โ”‚ โ”‚ โ€ข MY, ID, PHโ”‚ โ”‚ โ€ข Fast MVP  โ”‚
โ””โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”˜ โ””โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”˜ โ””โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”˜ โ””โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”˜ โ””โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”˜

The Hub Workflow: Start your chat with the Global PRD Agent. If it detects a highly regulated domain (like Healthcare in the US or FinTech in Europe), it will automatically recommend you switch to the specialized Spoke skill for a deeper audit.


๐Ÿš€ How to Use

Method 1: Install via CLI (Recommended)

npx skills add datht-work/safeai-global-agent

This will show all 5 skills โ€” select the ones you need.

Method 2: Use in Any AI Chat Tool (No Install)

Copy the raw SKILL.md content and paste it into your AI assistant's system prompt:

AI Tool Setup
Google Gemini Gems โ†’ Create Gem โ†’ Paste SKILL.md into Instructions
Claude (Anthropic) Projects โ†’ Create Project โ†’ Paste into Project Instructions
ChatGPT (OpenAI) Explore GPTs โ†’ Create โ†’ Paste into Instructions
GitHub Copilot Save as .github/copilot-instructions.md in your repo
Cursor Place SKILL.md in .cursor/rules/ directory
Windsurf Place SKILL.md in .windsurfrules directory

Quick Copy Links (Raw SKILL.md)

Skill Raw URL
Global PRD Agent Copy
GDPR Expert Copy
HIPAA Expert Copy
FinTech Compliance Copy
ASEAN Data Protection Copy

Method 3: Reference by URL

Paste this prompt into any AI chat:

Please read and follow the instructions at this URL as your system prompt:
https://raw.githubusercontent.com/datht-work/safeai-global-agent/main/SKILL.md

๐ŸŒ Supported Jurisdictions (35+)

๐ŸŒ Asia-Pacific

๐Ÿ‡ป๐Ÿ‡ณ Vietnam ยท ๐Ÿ‡จ๐Ÿ‡ณ China ยท ๐Ÿ‡ฏ๐Ÿ‡ต Japan ยท ๐Ÿ‡ฐ๐Ÿ‡ท South Korea ยท ๐Ÿ‡ฎ๐Ÿ‡ณ India ยท ๐Ÿ‡ธ๐Ÿ‡ฌ Singapore ยท ๐Ÿ‡ฆ๐Ÿ‡บ Australia ยท ๐Ÿ‡น๐Ÿ‡ญ Thailand ยท ๐Ÿ‡ฒ๐Ÿ‡พ Malaysia ยท ๐Ÿ‡ฎ๐Ÿ‡ฉ Indonesia ยท ๐Ÿ‡ต๐Ÿ‡ญ Philippines

๐ŸŒ Europe, Middle East & Africa

๐Ÿ‡ช๐Ÿ‡บ EU ยท ๐Ÿ‡ฌ๐Ÿ‡ง UK ยท ๐Ÿ‡จ๐Ÿ‡ญ Switzerland ยท ๐Ÿ‡น๐Ÿ‡ท Turkey ยท ๐Ÿ‡ฆ๐Ÿ‡ช UAE ยท ๐Ÿ‡ธ๐Ÿ‡ฆ Saudi Arabia ยท ๐Ÿ‡ฎ๐Ÿ‡ฑ Israel ยท ๐Ÿ‡ณ๐Ÿ‡ฌ Nigeria ยท ๐Ÿ‡ฟ๐Ÿ‡ฆ South Africa ยท ๐Ÿ‡ฐ๐Ÿ‡ช Kenya ยท ๐Ÿ‡ช๐Ÿ‡ฌ Egypt

๐ŸŒŽ Americas

๐Ÿ‡บ๐Ÿ‡ธ US (Federal + CA, CO, TX, VA, NY) ยท ๐Ÿ‡จ๐Ÿ‡ฆ Canada ยท ๐Ÿ‡ง๐Ÿ‡ท Brazil ยท ๐Ÿ‡ฒ๐Ÿ‡ฝ Mexico ยท ๐Ÿ‡ฆ๐Ÿ‡ท Argentina ยท ๐Ÿ‡จ๐Ÿ‡ด Colombia ยท ๐Ÿ‡ต๐Ÿ‡ช Peru


๐Ÿ“ International Standards & Certifications

The agent is trained to map product features to strict international frameworks (applied automatically in Smart and Full Audit modes):

Category Standard What the AI Does / Maps to in PRD
๐Ÿ”’ Security ISO/IEC 27001 Enforces Annex A controls (RBAC, cryptography, MFA, logging).
๐Ÿ›ก๏ธ Privacy ISO/IEC 27701 Adds PII controller/processor obligations and data minimization.
๐Ÿค– AI Risk ISO/IEC 42001 Defines an AI Impact Assessment, human oversight, and bias testing.
๐Ÿข Enterprise SOC 2 Type II Maps Trust Service Criteria (Security, Availability, Privacy).
โ™ฟ Access WCAG 2.2 AA Adds perceivable/operable ACs for frontend features.
๐Ÿ›๏ธ Legal EAA / ADA Checks European Accessibility Act & Americans with Disabilities Act.

๐Ÿ’ก Want to see it in action? Look at examples/sample-prd-output.md for a complete compliance PRD output.


๐Ÿ’ฌ Usage Examples

Your Prompt Mode Detected What Happens
"Write a quick PRD for login feature" ๐Ÿ“ Standard Clean PRD, no compliance scanning
"Viแบฟt PRD cho app thanh toรกn tแบกi Viแป‡t Nam" ๐Ÿ›ก๏ธ Smart Auto-detect VN โ†’ PDPD, Decree 53
"Write a PRD for user tracking in France" ๐Ÿ›ก๏ธ Smart Auto-detect EU โ†’ GDPR, ePrivacy
"Full compliance PRD for a telehealth app in California" ๐Ÿ”’ Full Audit CCPA, HIPAA, FDA SaMD, ISO, WCAG
"Build a payment gateway for Singapore โ€” full audit" ๐Ÿ”’ Full Audit PDPA, MAS TRM, PCI-DSS, ISO 27001

๐Ÿ”’ Security

  • โœ… Zero executable code โ€” Markdown-only skills
  • โœ… Zero runtime dependencies โ€” No supply-chain risk
  • โœ… No network calls โ€” No external connections
  • โœ… No data collection โ€” Stateless operations
  • โœ… CI/CD audited โ€” GitHub Actions security pipeline

See SECURITY.md for full policy.


๐Ÿ“‹ Version History

See CHANGELOG.md for detailed version history.

Version Date Highlights
v2.2.0 2026-03-06 Compliance Depth selector (Standard/Smart/Full), ISO 27001/27701/42001, SOC 2, Accessibility, Disclaimer
v2.1.0 2026-03-06 Multi-skill architecture, cross-linking, AI tool usage guides
v2.0.0 2026-03-05 35+ jurisdictions, security audit infrastructure
v1.0.0 2026-03-05 Initial release (VN, EU, US, CN)

๐Ÿค Contributing

We welcome contributions! Especially:

  • ๐ŸŒ New country regulations
  • ๐Ÿ”„ Regulation updates
  • ๐Ÿ› Citation corrections
  • ๐Ÿ“ PRD template improvements

See SECURITY.md for security-related contribution guidelines.


๐Ÿ“„ License

MIT License โ€” see LICENSE for details.


โš ๏ธ Disclaimer: This suite provides compliance guidance, not legal advice. Always consult qualified legal counsel for final compliance decisions.

Built with โค๏ธ by the SafeAI-Global Team ยท v2.2.0 ยท March 2026

About

No description, website, or topics provided.

Resources

Security policy

Stars

0 stars

Watchers

0 watching

Forks

Releases

Packages

Contributors