EU AI Act Compliance Specialist — Security & Safety

This skill provides operational EU AI Act (Regulation (EU) 2024/1689) compliance guidance for compliance teams. It helps classify AI systems into risk tiers, determine conformity assessment routes for high-risk systems, and identify obligations per organizational role, citing specific Articles and Annexes.

ra-qm claude-code

📂 View skill on GitHub ↗ 🚀 How to use

✨ What it does

Classifies AI systems into prohibited, high-risk, limited-risk, or minimal-risk tiers based on Article 5, Article 6, Ann
Checks Article 6(3) carve-outs to determine if an Annex III system is exempt from high-risk classification.
Selects conformity assessment route (Module A or Module H) per Article 43 and generates an Annex IV technical documentat
Provides a per-role obligation matrix covering provider, deployer, importer, distributor, and authorized representative
Includes Python scripts for automated classification, conformity planning, and obligation tracking.
Cites specific Articles and Annexes for every output.

🎯 When to use it

During AI system intake review to classify the system's risk tier under the Act.
When planning conformity assessment for a high-risk AI system, including selecting Module A or Module H.
When scoping obligations for a specific organizational role (provider, deployer, importer, distributor, authorized representative).
Before deploying an AI system in the EU to ensure all active obligations are met.
During annual compliance refresh to re-verify classifications and obligations as the Act phases in.

🚀 How to use

Trigger by asking to classify an AI system, plan conformity assessment, or list obligations for a role. Provide system characteristics (purpose, users, data, autonomy, deployment context) or a JSON file with system details. Example prompts:

Classify this AI system: a CV-screening tool that ranks job applicants.
What are the deployer obligations for a high-risk AI system under the EU AI Act?

📄 Output: A classification memo, conformity assessment plan, and obligation list with Article citations and next steps.

📦 Add this skill to Claude Code

# 1. Get the skills repo
git clone --depth 1 https://github.com/alirezarezvani/claude-skills /tmp/claude-skills

# 2. Copy this skill into your project (or ~/.claude/skills for all projects)
mkdir -p .claude/skills
cp -r /tmp/claude-skills/ra-qm-team/skills/eu-ai-act-specialist .claude/skills/eu-ai-act-specialist

Skill source: ra-qm-team/skills/eu-ai-act-specialist/SKILL.md

⚠️ Good to know

This skill is not a legal substitute and does not cover executive AI strategy or GDPR compliance; for novel cases or legal opinions, engage qualified counsel.

❓ FAQ

What are the four risk tiers under the EU AI Act?

The four tiers are prohibited (Article 5), high-risk (Article 6 + Annex III), limited-risk transparency (Article 50), and minimal-risk (default).

When is a high-risk system exempt under Article 6(3)?

An Annex III system is not high-risk if it performs a narrow procedural task, improves human activity results, detects patterns without replacing human assessment, or performs a preparatory task, but profiling of natural persons always remains high-risk.

What is the difference between Module A and Module H conformity assessment?

Module A is internal control (self-assessment) for most Annex III systems, while Module H requires a full QMS and notified body involvement, mandatory for biometrics systems.

🤖 Overview, features, install steps and FAQ were generated from the project's SKILL.md on Sep 4, 2026. Always check the original source before running commands.