By hpsgd
GRC Lead — governance, risk management, regulatory compliance, AI governance, audit readiness, and policy management.
Review AI/ML features for governance compliance — risk classification, bias assessment, transparency, and guardrail verification.
Bootstrap the governance, risk, and compliance documentation structure for a project. Creates docs/governance/, generates initial templates, and writes domain CLAUDE.md. Idempotent — merges missing sections into existing files without overwriting.
Audit compliance against a regulatory framework — gap analysis, evidence collection, and remediation planning.
Conduct a risk assessment — identify, analyse, and evaluate risks with quantified likelihood, impact, and treatment plans.
Write a Data Protection Impact Assessment (DPIA) for high-risk personal data processing. Required by GDPR Article 35 when processing is likely to result in high risk to individuals. Produces a structured assessment with risks, mitigations, and DPO review.
Uses power tools
Uses Bash, Write, or Edit tools
Own this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge. GitHub access is read-only (username + org membership).
Sign in to claimOwn this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge. GitHub access is read-only (username + org membership).
Sign in to claimBased on adoption, maintenance, documentation, and repository signals. Not a security audit or endorsement.
A plugin marketplace for Claude Code. Agents, skills, rules, and conventions that work together as a virtual team.
/plugin marketplace add hpsgd/turtlestack
Start with the core plugins (rules, thinking skills, and code review), then add agents for your stack:
/plugin install coding-standards@hpsgd
/plugin install writing-style@hpsgd
/plugin install security-compliance@hpsgd
/plugin install thinking@hpsgd
/plugin install tooling@hpsgd
/plugin install code-reviewer@hpsgd
/plugin install ai-engineer@hpsgd
Add a technology stack if relevant:
/plugin install dotnet-stack@hpsgd
/plugin install nextjs-stack@hpsgd
/plugin install python-stack@hpsgd
Then reload:
/reload-plugins
Browse the full plugin list below to see what else is available.
Per-project overrides. Create your own .claude/rules/ files. Project-level rules take precedence over marketplace rules.
Disabling a plugin. Set it to false in .claude/settings.json:
{
"enabledPlugins": {
"writing-style@hpsgd": false
}
}
Local overrides (not committed). Use .claude/settings.local.json for personal preferences that shouldn't affect the team.
{
"enabledPlugins": {
"coding-standards@hpsgd": true,
"writing-style@hpsgd": true,
"security-compliance@hpsgd": true,
"thinking@hpsgd": true,
"tooling@hpsgd": true,
"code-reviewer@hpsgd": true,
"dotnet-stack@hpsgd": true,
"nextjs-stack@hpsgd": true,
"python-stack@hpsgd": true,
"plugin-curator@hpsgd": true,
"coordinator@hpsgd": true,
"cpo@hpsgd": true,
"product-owner@hpsgd": true,
"ui-designer@hpsgd": true,
"ux-researcher@hpsgd": true,
"user-docs-writer@hpsgd": true,
"developer-docs-writer@hpsgd": true,
"internal-docs-writer@hpsgd": true,
"gtm@hpsgd": true,
"support@hpsgd": true,
"customer-success@hpsgd": true,
"grc-lead@hpsgd": true,
"cto@hpsgd": true,
"architect@hpsgd": true,
"react-developer@hpsgd": true,
"dotnet-developer@hpsgd": true,
"python-developer@hpsgd": true,
"ai-engineer@hpsgd": true,
"qa-lead@hpsgd": true,
"qa-engineer@hpsgd": true,
"release-manager@hpsgd": true,
"performance-engineer@hpsgd": true,
"devops@hpsgd": true,
"security-engineer@hpsgd": true,
"data-engineer@hpsgd": true,
"analyst@hpsgd": true,
"investigator@hpsgd": true,
"workflow-tools@hpsgd": true
}
}
After installing plugins, scaffold your project with domain-specific docs:
/coordinator:bootstrap-project my-project
npx claudepluginhub hpsgd/turtlestack --plugin grc-leadInternal documentation writer — architecture docs, runbooks, changelogs, onboarding guides, ADR documentation. Writes for engineers who know the domain but may be new to the codebase.
Go-to-market specialist — positioning, launch strategy, content marketing, competitive analysis
Customer support — ticket triage, feedback synthesis, knowledge base, bug escalation
Security baseline rules and audit skills for maintaining secure code
Developer documentation writer — API references, SDK guides, integration tutorials, code examples. Writes for developers who are competent but unfamiliar with your codebase.
Compliance and governance including regulatory mapping, security policies, audit readiness, GDPR, SOC2, and PCI-DSS compliance.
Governed workflow skills, reviewer agents, and enforcement hooks for govctl
Use this agent when you need to automate compliance processes for SOC 2, ISO 27001, GDPR, HIPAA, and other enterprise regulatory requirements. This agent specializes in compliance automation, audit preparation, continuous monitoring, and regulatory framework implementation for B2B platforms. Examples:
Use this agent when you need to implement AI ethics frameworks, governance policies, and responsible AI practices for B2B applications. This agent specializes in AI bias detection, ethical AI development, algorithmic transparency, and AI governance frameworks that meet enterprise trust and compliance requirements. Examples:
Regulatory compliance verification for GDPR, SOC2, and HIPAA
Regulatory compliance and governance planning BEFORE development begins. Covers GDPR, HIPAA, PCI-DSS, AI governance (EU AI Act, NIST AI RMF), security frameworks (ISO 27001, SOC 2), open source compliance, and data classification.