1. What we shipped
Today we are releasing the Cleo skills_library: 40 production-grade compliance skills covering cosmetics, food and beverage, electronics, toys, textiles, supplements, jewelry, medical devices, pet products, sustainability reporting and more. They are organised in four tiers (Product Core, Market Intelligence, Action, and Reference + Verticals) so an AI agent can pick the right capability at the right depth, without you orchestrating it.
Drop-in install, MIT license, free forever:
git clone https://github.com/Cleo-Labs-IA/skills_library.git \
~/.claude/skills/complyThat is the entire onboarding. Restart Claude Code and the skills auto-load. The repository is here: github.com/Cleo-Labs-IA/skills_library.
2. What each skill actually does
Each skill is a self-contained capability with a documented contract: inputs, outputs, jurisdictions covered, data sources cited. A few concrete examples:
Checks ingredients against 13 substance databases (CosIng, ECHA, REACH SVHC, California Prop 65, FDA, EFSA and others). Returns a verdict per substance per jurisdiction with concentration thresholds and the citing regulation.
Generates country-specific labeling rules: INCI nomenclature, allergen disclosures, mandatory warnings, Responsible Person, CE / UKCA marking, language requirements.
HS code classification, duty-rate lookup, landed-cost calculator, free-trade-agreement eligibility: across the 106 markets covered by the Cleo Legal API.
Spawns parallel sub-agents per market, runs every applicable skill, then consolidates everything into one risk map you can ship to your lawyer.
3. Demo: three real prompts
These are unedited examples. Type the question, get the answer. The skills handle source citation, jurisdiction nuances, and follow-up actions automatically.
You ask
"I want to launch a retinol face cream in France, Germany and Italy. What are the rules?"
Claude answers
Retinol is restricted under EU Regulation 1223/2009, Annex III, entry 339: max 0.3% in body products, max 0.05% in face products. You will need a CPNP notification and an EU Responsible Person established in one of the three target countries. Labeling rules: INCI list, batch code, PAO symbol, claims compliant with EU 655/2013. Estimated time to market: 6–8 weeks if your stability and PIF dossier are ready.
You ask
"Bluetooth speaker, made in Shenzhen, selling in US and EU. What certifications do I need?"
Claude answers
EU: CE marking covering RED (Radio Equipment Directive 2014/53/EU), LVD (2014/35/EU) and EMC (2014/30/EU); RoHS 3 substance declaration; WEEE registration in each Member State of import; from August 2026, GPSR responsible person and Digital Product Passport on the way for electronics. US: FCC Part 15 testing for unintentional radiators, SDoC labeling, Prop 65 warning if applicable. Total testing budget: roughly €8–15K, 6–12 weeks. HS code 8518.22: EU duty 2.5%, US duty 0% MFN.
You ask
"Can I sell my vitamin D3 supplement in Japan?"
Claude answers
Yes, as a Food with Function Claims (FFC) or general dietary supplement under the Food Sanitation Act. You need a pre-import notification to the Ministry of Health, Labour and Welfare, full Japanese-language labeling (name, ingredients, allergens, nutrition facts, importer details), and a domestic importer of record. Vitamin D3 has no statutory upper limit but Consumer Affairs Agency recommends staying below 100 µg/day. HS 2106.90, duty 8.8%, plus 10% consumption tax. Lead time: 4–6 weeks.
4. Why open-source: the business behind it
Honest section. We are not pretending this is pure altruism. Here is how it actually works:
- The skills are open-source under MIT: free forever, no signup, no telemetry.
- They are pre-wired to call the Cleo Legal API for real-time data: substance limits, customs rates, sanctions screening, regulatory updates.
- Free tier: 3 requests forever, no card. Pro: €349/month for 1M requests. Enterprise: contact us.
- Open-source is how we distribute. The API is how we monetise. Product-led growth, not gatekeeping.
Every founder who installs the skills discovers what compliance automation can look like. Most do not need the paid API for a while. The few who scale eventually pay, and they get a tool they have already trusted for months.
5. How it integrates with Claude Code
Skills auto-trigger when you ask compliance questions, nothing to configure, no slash commands to remember. For live data (real-time substance lookups, customs rates), add the optional Cleo Legal API MCP server:
claude mcp add cleo-legal-api \
https://api.legaldata.cleolabs.co/mcp \
--header "Authorization: Bearer ld_live_YOUR_KEY"A landing page with the full skill catalog and copy-paste install snippets lives at cleo-labs-ia.github.io/skills_library.
6. Who it is for
D2C cosmetics founders
Launching in 5 countries, no in-house reg-affairs team, need answers before the next sprint.
Shopify merchants
Prepping Amazon EU listings with the GPSR deadline closing in: responsible person, traceability, recalls.
Marketplace sellers
Cross-checking Prop 65 warnings, CPSC reports and California labeling before shipping into the US.
Indie brands post-Brexit
Expanding from US to UK: UKCA marking, UK Responsible Person, post-Brexit conformity assessments.
Pet food and pet care
Navigating EU 767/2009 feed labeling, claim limitations and category-specific notification flows.
Solo compliance consultants
Doing the work of three people: use the skills to draft, then keep your expert eye for the edge cases.
7. What is coming next
60+ skills by end of Q3: alcohol and tobacco, agricultural inputs, automotive aftermarket, packaging-specific verticals.
A skill marketplace for community contributions, with versioning and a public review process.
Native integrations with Shopify, WooCommerce, BigCommerce: compliance check before publish, surfaced in your admin UI.
A Compliance Academy: long-form guides built around the skills, covering the rules behind the prompts.
8. Get started
One command, 30 seconds, zero lock-in. If you build with AI agents and ship physical products: this is for you.
