Bind
Run compliance gap analyses for SOC2, GDPR, HIPAA, and ISO 27001, then produce stage-appropriate remediation plans and policy drafts. Use when preparing for a compliance audit or framework adoption. Trigger with "run a SOC2 gap analysis", "build a compliance remediation plan".
- Type
- Subagent
- Repository
- jeremylongshore/tons-of-skills-marketplace
- GitHub stars
- 2.8k
- License
- MIT
- Repo last updated
- Sep 27, 2026
- Source file
- plugins/ai-agency/tonone/agents/bind.md
- Model
- sonnet
- Version
- 1.0.0
- Author
- Jeremy Longshore <[email protected]>
What Bind is
Bind is a subagent published in the jeremylongshore/tons-of-skills-marketplace repository on GitHub, which has about 2.8k stars. The repository describes itself as: “Model-agnostic agent-skills platform with a harness-free canonical layer, verified adapters, and the ccpi package manager. Explore at tonsofskills.com.”
A subagent is a specialist assistant that Claude can hand part of a task to. It is a markdown file whose frontmatter sets a name, a description that tells Claude when to delegate, and optionally the tools and model it may use; the body becomes the subagent's own system prompt.
Because a subagent works in its own context, it keeps the main conversation focused: Claude can send a narrow job, such as a review or a specialised analysis, to Bind and get back a compact result.
How to install Bind
Claude Code
- Download bind.md from the repository.
- Save it to ~/.claude/agents/ to use it in every project, or to .claude/agents/ inside one project to share it through version control.
- Claude Code watches these folders, so the subagent is usually available right away. Ask Claude to use it by name, or @-mention it to make sure it runs.
Claude Cowork
- Cowork loads subagents through plugins. If the repository is packaged as a plugin marketplace, add it under Customize → Plugins → Add marketplace and install the plugin that contains this subagent.
- Otherwise, bundle the file into your own plugin's agents/ folder and upload it from Customize → Plugins.
New to extending Cowork? Our plugins guide and Customize guide explain how skills, plugins, and connectors fit together.
Inside the source file
An excerpt from plugins/ai-agency/tonone/agents/bind.md, shared under the repository's MIT license. Read the full file on GitHub.
You are Bind — Compliance Framework Engineer on the Legal Team. Implements compliance frameworks — SOC2 to GDPR — and writes the remediation plan.
Think in legal risk, enforceability, and business consequence. Legal advice without business context is theater. Always frame findings as: what is the risk, what is the probability, what is the fix, what does it cost to do nothing. Never just cite law — tell the founder what it means for their company.
Communication
Respond terse. All legal substance stays — only filler dies. Follow output-kit protocol: compressed prose, no filler, fragments OK. Documents: normal prose. See docs/output-kit.md for CLI skeleton, severity indicators, 40-line rule.
Operating Principle
Right-size legal risk. Founders make decisions — Bind provides the analysis.
Before any legal work, establish: What is the actual exposure? What is the company stage? What does a worst-case look like? A Series A startup writing customer contracts needs different legal rigor than a solo dev building a side project.
90% case for an early-stage company: clear contracts with customers, basic corporate hygiene, no IP landmines, compliance with the one or two regulations that actually apply. Start there.
What you skip early: Full legal ops infrastructure, compliance certifications nobody is asking for, multi-jurisdiction analysis when you operate in one country.
What you never skip: Written agreements with co-founders and employees. IP assignment in every offer letter. Basic customer contract before revenue. Privacy policy before collecting data.
Scope
Owns: Compliance framework implementation — SOC2, GDPR, HIPAA, ISO 27001 gap analysis and remediation plans
Skills
- Gap: Run a compliance gap analysis against SOC2, GDPR, HIPAA, or ISO 27001.
- Policy: Draft compliance policies required by a framework (access control, incident response, data retention).
- Recon: Survey existing compliance artifacts — policies, audits, certifications.
Key Rules
- Frame every finding as: risk, probability, fix, cost of inaction
- Stage-appropriate: a solo dev does not need Fortune 500 legal infrastructure
- Always flag when outside counsel is required (litigation, regulatory enforcement, M&A)
- Plain language first — legal docs users can read convert and retain better
- No legal advice without jurisdiction awareness — ask if jurisdiction matters
Gstack Skills
When gstack is installed, invoke these skills for Bind work:
Process Disciplines
When performing Bind work, follow these superpowers process skills:
Iron rule: No completion claims without fresh verification.
Before you install
- Read the whole file first. Skills, commands, and subagents are instructions Claude will follow, so make sure they match what you want.
- Check which tools, scripts, or MCP servers it uses. Local servers and scripts run with your permissions.
- Try it in a test project or a copy of your files before pointing it at real work.
- Pin the version you tested, and review changes before updating.
- Watch for instructions that fetch web content or run shell commands; those are where prompt injection risks start. See our prompt injection guide.
FAQ
What is Bind?
Bind is a subagent for Claude Code and Claude Cowork from the jeremylongshore/tons-of-skills-marketplace repository on GitHub. Run compliance gap analyses for SOC2, GDPR, HIPAA, and ISO 27001, then produce stage-appropriate remediation plans and policy drafts. Use when preparing for a compliance audit or framework adoption. Trigger with "run a SOC2 gap analysis", "build a compliance remediation plan".
How do I install Bind in Claude Code?
Download bind.md from the repository. Save it to ~/.claude/agents/ to use it in every project, or to .claude/agents/ inside one project to share it through version control. Claude Code watches these folders, so the subagent is usually available right away. Ask Claude to use it by name, or @-mention it to make sure it runs.
Can I use Bind in Claude Cowork?
Cowork loads subagents through plugins. If the repository is packaged as a plugin marketplace, add it under Customize → Plugins → Add marketplace and install the plugin that contains this subagent. Otherwise, bundle the file into your own plugin's agents/ folder and upload it from Customize → Plugins.
Is Bind safe to install?
It is a third-party community resource, not reviewed by Anthropic or this site. Read the source file first, check which tools and connectors it uses, and install only from sources you trust.
Similar resources
- Openevidence Pack Operator-grade OpenEvidence pack with 24 source-grounded skills for clinical evidence review, safe adoption, privacy, security, and product workflow governance. Plugin · jeremylongshore/tons-of-skills-marketplace
- Openbb Terminal Open-source investment research terminal integration - equity analysis, crypto tracking, macro indicators, portfolio optimization, and AI-powered financial insights using OpenBB Platform Plugin · jeremylongshore/tons-of-skills-marketplace
- Operations Team Operations team — 4 agents: Mint, Folk, Keel, Brace Plugin · jeremylongshore/tons-of-skills-marketplace
- Openbb Research AI-powered investment research using OpenBB - comprehensive analysis, thesis Slash Command · jeremylongshore/tons-of-skills-marketplace
- Blue Design MITRE ATT&CK-mapped detection rules, CIS-benchmarked hardening playbooks, and SOC triage procedures to reduce attacker dwell time. Use when building defensive security controls or auditing detection coverage. Trigger with "design detection rules", "write a hardening playbook". Subagent · jeremylongshore/tons-of-skills-marketplace
- Bench Design API benchmarks, profile p50/p95/p99 latency, set up throughput tests, and detect performance regressions with k6/wrk. Use when establishing baselines or catching latency regressions in CI. Trigger with "benchmark this API", "set up a performance test". Subagent · jeremylongshore/tons-of-skills-marketplace
- Brace Design ticket workflows, SLA tiers, knowledge-base structures, and escalation paths for stage-appropriate support operations. Use when building or auditing a support operation from triage to Tier 3. Trigger with "design a support workflow", "build a support knowledge base". Subagent · jeremylongshore/tons-of-skills-marketplace
- Beads Guru Use this agent for general beads (bd) expertise — the three-layer mirror (bd to GitHub to Plane via bd-sync), plain-English bead naming, the JSONL throttle and export model, the source-of-truth hierarchy, and bead hygiene audits. It is the generalist that explains bd discipline and points to the specialist agents for sync, epic-closure, dependency, and recovery work. Subagent · jeremylongshore/tons-of-skills-marketplace