agentsclimarketplace

Compliance roadmap

Skill bromso/metapowers/plugins/compliance/skills/compliance-roadmap

A Claude Code plugin that adds an agentic skills framework, with MCP's and a meta prompting processes. Inspired by "Superpowers" & "Figma Console MCP", but not just for development or design; but for all aspect within the digital production cycle.

Install
npx -y skills add bromso/metapowers --skill compliance-roadmap

Assembled from the repository path, not quoted from the project. Check it against their README if it does not work.

One thing to look at

  • 1 stars1 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.

What its author says it does

Copied from the file, not written here

Build a phased compliance roadmap with milestones, dependencies, and resource needs

SKILL.md

2.8 KB, 629 tokens by cl100k_base, as published. Nobody here has run it

Compliance Roadmap

Build a phased compliance roadmap for "$ARGUMENTS" with concrete milestones, inter-certification dependencies, resource estimates, and target dates.

Prerequisites

None — this is a Phase 0 (Scope) skill.

Process

  1. Read context files:

    • Read plugins/compliance/shared/grc-lifecycle-guide.md for GRC methodology reference
    • Read .metapowers/compliance/$ARGUMENTS/00-scope.md for regulation inventory, priorities, and control framework

  2. Phase 1 — Quick wins and highest-priority regulations:

    • Select Tier 1 regulations and quick wins from the priority analysis
    • Define specific milestones with target completion dates
    • Identify controls to implement first (highest leverage points)
    • Estimate effort: internal hours, external consultant days, tool costs

  3. Phase 2 — Comprehensive coverage:

    • Select Tier 2 regulations building on Phase 1 foundations
    • Map dependencies — which Phase 1 controls are prerequisites?
    • Define milestones with target dates accounting for Phase 1 completion
    • Estimate incremental effort (many controls already in place)

  4. Phase 3 — Advanced and sector-specific:

    • Select Tier 3 and sector-specific regulations
    • Map dependencies on Phase 1 and Phase 2 controls
    • Define milestones with target dates
    • Estimate effort for remaining gap controls

  5. Dependency mapping:

    • Document inter-certification dependencies (e.g., ISO 27001 before CSA STAR Level 2, SOC 2 before enterprise sales)
    • Identify critical path — which certifications gate others?
    • Flag parallel tracks that can proceed independently

  6. Resource planning:

    • Estimate total resources: internal FTEs, external consultants, audit costs, tooling
    • Create budget breakdown by phase
    • Identify hiring or training needs
    • Recommend GRC tooling (if applicable)

  7. Write the artifact to .metapowers/compliance/$ARGUMENTS/00-scope.md (append to existing) with sections:

    • Roadmap Overview — visual timeline of all three phases
    • Phase 1 Plan — regulations, milestones, dates, resources
    • Phase 2 Plan — regulations, milestones, dates, resources
    • Phase 3 Plan — regulations, milestones, dates, resources
    • Dependency Graph — inter-certification dependencies and critical path
    • Resource Summary — total budget, FTE needs, external support

Output

The compliance roadmap appended to .metapowers/compliance/$ARGUMENTS/00-scope.md. Present a summary to the user highlighting:

  • Phase 1 target regulations and timeline
  • Critical path dependencies
  • Total estimated resource needs
  • Recommended next step: begin Phase 1 assessments (e.g., /compliance:soc2 $ARGUMENTS or /compliance:iso27001 $ARGUMENTS)

Keep looking

Skills are one crate of 328,083. Ordering is by how many stacks a row turns up in, so the top of any crate is what has actually been picked rather than what has the most stars.