Security Compliance

Claude Code: /plugin marketplace add wshobson/agents → /plugin install security-compliance@claude-code-workflows

A deliberately small plugin: one security auditor agent and one compliance-check command. What separates it from a generic checklist is the order it works in. The command first decides which regulations actually apply, using tests such as whether data belonging to EU residents is processed or whether the system touches protected health information, and only then expands the matching control set. That scoping step is what keeps the output from becoming a wall of irrelevant requirements. Concrete obligations follow: 72-hour breach notification, right to erasure, data minimisation, audit trail generation and secrets scanning, plus the documentation an auditor will ask for.