Individual skill
eu-ai-act
EU AI Act (Regulation (EU) 2024/1689) compliance advisor — risk classification across all four tiers, all 9 prohibited practices (Art. 5, including the nudification/CSAM prohibition from Dec 2, 2026), all 8 Annex III high-risk use case areas, provider and deployer obligations (Arts. 9–17, 26), GPAI model obligations including the July 2025 Code of Practice (Arts. 51–55), conformity assessment and CE marking (Arts. 43–48), EU AI database registration, Art. 50 transparency (chatbots, synthetic media, AI-generated content), governance (AI Office, AI Board), penalties (Art. 99), confirmed phase-in timeline (Digital Omnibus, Reg. (EU) 2026/1744, in force July 27, 2026: Annex III deferred to Dec 2, 2027; Annex I to Aug 2, 2028), and cross-framework mapping to ISO 42001, NIST AI RMF, and GDPR. Use for any EU AI regulation, AI system classification, or AI compliance question. Current as of November 2026. GPAI enforcement active: Art. 91 information requests reported since Aug 2026 (procedures: Reg. (EU) 2026/1755).
plugins/eu-ai-act/skills/eu-ai-act/SKILL.md
Source commit 5a9afcfce98efa4d64f75bead5e544ee06c38154
What was checked
- Matches the observed repository HEAD
- Yes
- Scanner rules are current
- No
- Repository scan complete
- No
- Skill scan complete
- No
- Observed behavior
- Not checked yet
- Last checked
- Nov 10, 2026
These are observations at the recorded commit, not a guarantee of safety. Review the source before running it.
Install this skill
Choose an agent in your Stack or copy a command below. Commands fetch the pinned commit and copy only this skill directory. Existing destinations are refused. Copying a command does not install anything.
An install command is unavailable: current rules, complete repository and skill scans, an eligible behavior level and a permitted license are required.
Repository context
- Repository stars (not skill ratings)
- 1,065
- Repository last updated
- Nov 7, 2026
- License
- MIT
Observed agent integration: No specific integration evidence. Standard SKILL.md installation does not imply verified compatibility.
- claude-ai Repository topic
- claude-skills Repository topic
- compliance Repository topic
- data-privacy Repository topic
- fedramp Repository topic
- gdpr Repository topic
- governance Repository topic
- hipaa Repository topic
- iso27001 Repository topic
- risk Repository topic
- data Derived category
- data-databases Derived category
Files and excerpt
File metadata and permitted, redacted excerpts come from the recorded scan. Source links are pinned to that commit.
Browse files
SKILL.mdcore · 30,901 bytesSKILL.mdcore · 30,901 bytesSKILL.mdcore · 30,901 bytesSKILL.mdcore · 30,901 bytesSKILL.mdcore · 30,901 bytesreferences/gpai-governance.mddoc · 19,548 bytesreferences/obligations-high-risk.mddoc · 15,418 bytesreferences/risk-classification.mddoc · 14,483 bytes
Read excerpt
# EU AI Act — Compliance Advisor
> **Last verified:** 2026-11-06
You are an expert EU AI Act compliance advisor with deep knowledge of **Regulation (EU) 2024/1689** and the **Digital Omnibus** — Regulation (EU) 2026/1744, published in the Official Journal July 24, 2026 and in force since July 27, 2026, its Annexes, Recitals, and all implementing measures. Every response cites the governing Article, Annex, or Recital.
> ⚠<U+FE0F> **Enforcement era**: **AI Office enforcement powers over GPAI providers have been active since August 2, 2026** — information requests (Art. 91), model evaluations (Art. 92), mitigation measures (Art. 93), and fines up to €15M or 3% of worldwide turnover. Enforcement has begun: the AI Office issued its first formal requests for information to GPAI providers under Art. 91, first reported in late August 2026, with a further wave announced October 14, 2026 covering security practices, external evaluation, and post-market monitoring. Recipients have not been officially named. GPAI providers must be compliant with Arts. 53–55 (or demonstrate Code of Practice adherence) now, and documentation must be inspection-ready.
>
> **Implementing Regulation (EU) 2026/1755** (OJ July 21, 2026, in force August 10, 2026) sets the procedural rules for Commission proceedings against GPAI providers: model evaluations including API, source code, and model access; appointment and independence of experts; fine proceedings with preliminary findings and a right to be heard; access to file; and a five-year limitation period. A consultation on a draft implementing act for penalty-proceeding procedural rules opened October 12, 2026 and closes November 9, 2026.
## 8-Step Workflow
**1 → Scope & Role Identification**
Determine whether the user is a **provider** (develops/places AI on market), **deployer** (uses AI under own authority), **importer**, **distributor**, or **authorised representative** (Art. 3). Identify the Member State(s) of operation.