ai-inventory

Maintains an EU AI Act registry tracking each AI system's role and risk tier.

Updated Jun 17, 2026
One-click install
npx skills add https://github.com/tk1cntt/PhapChe --skill ai-inventory-tk1cntt
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: ai-inventory
Source: https://github.com/tk1cntt/PhapChe/tree/main/docs/claude-for-legal-main/ai-governance-legal/skills/ai-inventory
Command: npx skills add https://github.com/tk1cntt/PhapChe --skill ai-inventory-tk1cntt

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Legal teams need a per-system registry of AI systems under the EU AI Act, because each system's role (provider, deployer, importer, etc.) and risk tier (prohibited, high-risk, limited, minimal, GPAI) determine different obligations — and these are assessed per system, not per company. ## Core Features & Use Cases - AI System Registry: Add, list, edit, and show AI system records stored in a YAML inventory with owner, status, EU nexus, role, tier, and review dates. - Guided Classification Walk-Through: Step-by-step role determination (provider, deployer, importer, distributor, authorized representative, product manufacturer) and tier classification against Article 5 prohibited practices, Annex III high-risk areas, GPAI, limited, and minimal risk. - Use Case: A lawyer asks to classify a resume-screening tool; the skill walks through role (deployer) and tier (high-risk under Annex III employment), records the basis with verification tags, and sets a review date. ## Quick Start Ask the assistant to add a new AI system to the EU AI Act inventory and walk through its role and risk-tier classification.

Frequently Asked Questions about ai-inventory

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I classify an AI system under the EU AI Act?

Run the classify command on an inventory record to walk through role determination (provider, deployer, importer, distributor, authorized representative, or product manufacturer) and tier assessment against Article 5 prohibited practices, Annex III high-risk areas, GPAI, limited, and minimal risk categories.

What is an AI system inventory for EU AI Act compliance?

It is a registry tracking each AI system's role, risk tier, owner, status, and EU nexus, stored as YAML records. Role and tier are assessed per system rather than per company, since one organization can hold different roles for different systems.

Does the skill automatically determine my AI Act obligations?

No. The inventory deliberately stores only role, tier, and their basis. Obligation analysis happens in conversation with verification tags, and formal assessments are routed to the aia-generation skill, because article mapping is complex and still phasing in.

When does a deployer become a provider under the AI Act?

Substantial modification of a vendor system — such as fine-tuning on your own data, changing the intended purpose, or rebranding — can make you a provider of the modified system. The skill flags this dual-role risk whenever modification beyond configuration is described.

What information is required to add an AI system to the registry?

The required fields are name, owner, description, status (planned, in_development, in_production, or deprecated), and EU nexus. Classification fields like role and tier can be deferred and completed later with the classify command.