Analyzes how multiple regulations interact for a specific product, service, or business model. Identifies where obligations overlap, reinforce, complement, duplicate, or conflict; builds a priority matrix; produces an integrated compliance timeline; and estimates the total compliance burden.
SkillScore79Maintained
Automatic
◆FinServ Compliance pack
Last verified 8/16/2026
What it changes
Passed 19 of 24 test cases with the skill, and 14 of 24 without it.
Without skill58%
With skill79%
Checks it passed that the model alone missed
Requires verifying regulatory texts and citations against primary official sources.
Applies the stricter standard rule to select the 24-hour NIS2 early warning deadline.
Explains that entity size metrics determine jurisdiction under NIS2 and DORA size thresholds.
and 2 more in the full report
5 fixed14 passed either way5 still failing0 broke
Pass-rate lift
+21 pp
Tokens
+85%
Agent turns
0%
Response time
+3%
Model gemini-3.6-flashMeasured 8/16/2026v119 of 24 cases passed with skill
Tokens, turns and time describe resource use, not a dollar price.
See it in action
One of 5 test cases the skill fixed. Same model, same prompt, with and without the skill.
1 of 5
Prompt
What standard filename convention should be used when delivering an Excel compliance matrix for client Enterprise AI on 2026-03-15?
What was checked, without and with the skill
Checked
Without skill
With skill
Names the file compliance-matrix-Enterprise AI-2026-03-15.xlsx or compliance-matrix-enterprise-ai-2026-03-15.xlsx.
Missed
Passed
case-18 · gemini-3.6-flash · 8/16/2026 · answers are capped and redacted
What's inside
The instructions your model reads when the skill loads.
SKILL.md226 lines3 files
Cross-Regulatory Impact Analyzer
Purpose
Most regulatory analyses treat regulations one at a time. This is fine when a business is subject to one regulation. It stops being fine the moment multiple regulations reach the same activity, because the real compliance questions live in the overlap: which obligation is stricter, which deadline comes first, what satisfies both, and what conflicts. This skill produces the analysis that single-regulation guides do not.
When to use
New product or service launch where more than one regulation plausibly applies
M&A due diligence on a target with multi-regulation exposure
Strategic compliance planning where a siloed, regulation-by-regulation approach has hit its limits
Complex client advisory on regulatory interactions
Budget and resourcing estimation for multi-regulation programmes
Triaging incident response playbooks where multiple reporting regimes trigger simultaneously
Analysis framework
The analysis proceeds in six phases. Each phase produces an output that feeds the next.
Phase 1: Scope determination
Identify which regulations apply based on:
Product or service type: hardware, software, SaaS, IoT, AI system, platform, financial service
Sector: financial services, healthcare, critical infrastructure, public sector, consumer, etc.
Entity size: headcount, revenue, balance sheet (matters for NIS2, DORA size thresholds, SME carve-outs)
Data processing: personal data types, volumes, special categories
Geographic scope: EU-wide, specific Member States, third-country targeting
Risk profile: safety, security, fundamental rights implications
Document the inclusion rationale for each regulation. Document the exclusion rationale too, because "we considered X and concluded it does not apply because Y" is half the value of the analysis.
Phase 2: Obligation extraction
For each applicable regulation, extract:
Core requirements: what must be done
Deadlines: when compliance is required, distinguishing phased application dates
Penalties: administrative fines, criminal sanctions, private rights of action
Audits AI-assisted legal, compliance, governance, and institutional decisions before reliance to determine whether the responsible human or institution has enough access to the evidence, reasoning basis, uncertainty, authority, and review path to genuinely own the decision rather than merely approve, sign, or transmit it.