Validates pull requests against regulatory, security, and organizational compliance requirements. Ensures changes meet GDPR, HIPAA, PCI-DSS, and other compliance frameworks.
SkillScore100Maintained
Automatic
◆Security & AppSec pack
Last verified 8/4/2026
What it changes
Passed 21 of 21 test cases with the skill, and 9 of 21 without it.
Without skill41%
With skill100%
Checks it passed that the model alone missed
The input scope is set to healthcare_data.
The inputs list frameworks including hipaa.
The custom rule severity for pii_fields is high.
and 12 more in the full report
13 fixed9 passed either way0 still failing0 broke
Pass-rate lift
+59 pp
Tokens
+68%
Agent turns
0%
Response time
-46%
Model gemini-3.6-flashMeasured 8/4/2026v122 of 22 cases passed with skill · 21 comparable
Tokens, turns and time describe resource use, not a dollar price.
See it in action
One of 12 test cases the skill fixed. Same model, same prompt, with and without the skill.
1 of 12
Prompt
Execute a dynamic security fuzzing test against our live staging HTTP API endpoint `https://staging-api.example.com/v1/auth` to discover SQL injection and cross-site scripting vulnerabilities.
What was checked, without and with the skill
Checked
Without skill
With skill
The response addresses dynamic HTTP vulnerability testing rather than pull request static compliance validation.
Missed
Passed
case-22 · gemini-3.6-flash · 8/4/2026 · answers are capped and redacted
What's inside
The instructions your model reads when the skill loads.
SKILL.md292 linessingle file
Compliance Validation Skill
This skill performs automated compliance validation on pull requests, ensuring changes adhere to regulatory requirements, security standards, and organizational policies.
Compliance Frameworks Supported
1. Data Protection & Privacy
GDPR: EU General Data Protection Regulation compliance
CCPA: California Consumer Privacy Act requirements
LGPD: Brazilian General Data Protection Law
PIPEDA: Canadian Personal Information Protection and Electronic Documents Act
2. Healthcare & Medical
HIPAA: Health Insurance Portability and Accountability Act
HITECH: Health Information Technology for Economic and Clinical Health Act
HITRUST: Healthcare security framework
FDA 21 CFR Part 11: Electronic records and signatures
3. Financial Services
PCI-DSS: Payment Card Industry Data Security Standard
SOX: Sarbanes-Oxley Act compliance
GLBA: Gramm-Leach-Bliley Act privacy requirements
FFIEC: Federal Financial Institutions Examination Council guidelines
4. Industry-Specific
NIST Cybersecurity Framework: National Institute of Standards and Technology
ISO 27001: Information security management systems
CIS Controls: Center for Internet Security critical security controls
MITRE ATT&CK: Adversarial tactics, techniques, and common knowledge
Validation Categories
1. Data Handling Compliance
Data Classification: Proper labeling of sensitive data
Retention Policies: Data lifecycle management compliance
Cross-Border Transfers: International data transfer restrictions
Consent Management: User consent and preference handling
2. Security Controls
Access Controls: Role-based access and least privilege
Advanced deep learning automation for complex infrastructure pattern recognition, intelligent optimization, and self-healing systems. Use when implementing sophisticated AI capabilities with neural networks, deep learning models, and advanced pattern recognition.