domains / families / security / compliance
AI compliance and policy engine — evaluate scan results against OWASP, NIST, SOC 2, ISO 27001, CMMC, EU AI Act, AISVS v1.0, and related frameworks. Generate SBOMs and compliance reports. Use when: "compliance report", "NIST", "SOC 2", "ISO 27001", "OWASP", "EU AI Act", "AISVS", "generate SBOM", "policy check". MiCA compliance evidence and stablecoin risk scoring. Use when the user asks about stablecoin compliance, MiCA status, peg stability, or needs verifiable evidence for audit workflows.
The two skills both address compliance but for entirely different domains and toolchains. The first is a financial-regulatory skill for MiCA and stablecoin evidence using FeedOracle MCP tools. The second is a software/AI security compliance engine (agent-bom) that evaluates scans against OWASP, NIST, SOC 2, ISO 27001, EU AI Act, etc., and generates SBOMs. They do not reproduce, shorten, or wrap each other; each contains material steps and constraints the other lacks, so crowning one would hide a real alternative.