← All skills
Tencent SkillHub Β· AI

Fda Consultant Specialist

FDA regulatory consultant for medical device companies. Provides 510(k)/PMA/De Novo pathway guidance, QSR (21 CFR 820) compliance, HIPAA assessments, and device cybersecurity. Use when user mentions FDA submission, 510(k), PMA, De Novo, QSR, premarket, predicate device, substantial equivalence, HIPAA medical device, or FDA cybersecurity.

skill openclawclawhub Free
0 Downloads
0 Stars
0 Installs
0 Score
High Signal

FDA regulatory consultant for medical device companies. Provides 510(k)/PMA/De Novo pathway guidance, QSR (21 CFR 820) compliance, HIPAA assessments, and device cybersecurity. Use when user mentions FDA submission, 510(k), PMA, De Novo, QSR, premarket, predicate device, substantial equivalence, HIPAA medical device, or FDA cybersecurity.

⬇ 0 downloads β˜… 0 stars Unverified but indexed

Install for OpenClaw

Quick setup
  1. Download the package from Yavira.
  2. Extract the archive and review SKILL.md first.
  3. Import or place the package into your OpenClaw setup.

Requirements

Target platform
OpenClaw
Install method
Manual import
Extraction
Extract archive
Prerequisites
OpenClaw
Primary doc
SKILL.md

Package facts

Download mode
Yavira redirect
Package format
ZIP package
Source platform
Tencent SkillHub
What's included
SKILL.md, references/device_cybersecurity_guidance.md, references/fda_capa_requirements.md, references/fda_submission_guide.md, references/hipaa_compliance_framework.md, references/qsr_compliance_requirements.md

Validation

  • Use the Yavira download entry.
  • Review SKILL.md after the package is downloaded.
  • Confirm the extracted package contains the expected setup assets.

Install with your agent

Agent handoff

Hand the extracted package to your coding agent with a concrete install brief instead of figuring it out manually.

  1. Download the package from Yavira.
  2. Extract it into a folder your agent can access.
  3. Paste one of the prompts below and point your agent at the extracted folder.
New install

I downloaded a skill package from Yavira. Read SKILL.md from the extracted folder and install it by following the included instructions. Tell me what you changed and call out any manual steps you could not complete.

Upgrade existing

I downloaded an updated skill package from Yavira. Read SKILL.md from the extracted folder, compare it with my current installation, and upgrade it while preserving any custom configuration unless the package docs explicitly say otherwise. Summarize what changed and any follow-up checks I should run.

Trust & source

Release facts

Source
Tencent SkillHub
Verification
Indexed source record
Version
2.1.1

Documentation

ClawHub primary doc Primary doc: SKILL.md 25 sections Open source page

FDA Consultant Specialist

FDA regulatory consulting for medical device manufacturers covering submission pathways, Quality System Regulation (QSR), HIPAA compliance, and device cybersecurity requirements.

Table of Contents

FDA Pathway Selection 510(k) Submission Process QSR Compliance HIPAA for Medical Devices Device Cybersecurity Resources

FDA Pathway Selection

Determine the appropriate FDA regulatory pathway based on device classification and predicate availability.

Decision Framework

Predicate device exists? β”œβ”€β”€ YES β†’ Substantially equivalent? β”‚ β”œβ”€β”€ YES β†’ 510(k) Pathway β”‚ β”‚ β”œβ”€β”€ No design changes β†’ Abbreviated 510(k) β”‚ β”‚ β”œβ”€β”€ Manufacturing only β†’ Special 510(k) β”‚ β”‚ └── Design/performance β†’ Traditional 510(k) β”‚ └── NO β†’ PMA or De Novo └── NO β†’ Novel device? β”œβ”€β”€ Low-to-moderate risk β†’ De Novo └── High risk (Class III) β†’ PMA

Pathway Comparison

PathwayWhen to UseTimelineCost510(k) TraditionalPredicate exists, design changes90 days$21,760510(k) SpecialManufacturing changes only30 days$21,760510(k) AbbreviatedGuidance/standard conformance30 days$21,760De NovoNovel, low-moderate risk150 days$134,676PMAClass III, no predicate180+ days$425,000+

Pre-Submission Strategy

Identify product code and classification Search 510(k) database for predicates Assess substantial equivalence feasibility Prepare Q-Sub questions for FDA Schedule Pre-Sub meeting if needed Reference: See fda_submission_guide.md for pathway decision matrices and submission requirements.

Workflow

Phase 1: Planning β”œβ”€β”€ Step 1: Identify predicate device(s) β”œβ”€β”€ Step 2: Compare intended use and technology β”œβ”€β”€ Step 3: Determine testing requirements └── Checkpoint: SE argument feasible? Phase 2: Preparation β”œβ”€β”€ Step 4: Complete performance testing β”œβ”€β”€ Step 5: Prepare device description β”œβ”€β”€ Step 6: Document SE comparison β”œβ”€β”€ Step 7: Finalize labeling └── Checkpoint: All required sections complete? Phase 3: Submission β”œβ”€β”€ Step 8: Assemble submission package β”œβ”€β”€ Step 9: Submit via eSTAR β”œβ”€β”€ Step 10: Track acknowledgment └── Checkpoint: Submission accepted? Phase 4: Review β”œβ”€β”€ Step 11: Monitor review status β”œβ”€β”€ Step 12: Respond to AI requests β”œβ”€β”€ Step 13: Receive decision └── Verification: SE letter received?

Required Sections (21 CFR 807.87)

SectionContentCover LetterSubmission type, device ID, contact infoForm 3514CDRH premarket review cover sheetDevice DescriptionPhysical description, principles of operationIndications for UseForm 3881, patient population, use environmentSE ComparisonSide-by-side comparison with predicatePerformance TestingBench, biocompatibility, electrical safetySoftware DocumentationLevel of concern, hazard analysis (IEC 62304)LabelingIFU, package labels, warnings510(k) SummaryPublic summary of submission

Common RTA Issues

IssuePreventionMissing user feeVerify payment before submissionIncomplete Form 3514Review all fields, ensure signatureNo predicate identifiedConfirm K-number in FDA databaseInadequate SE comparisonAddress all technological characteristics

QSR Compliance

Quality System Regulation (21 CFR Part 820) requirements for medical device manufacturers.

Key Subsystems

SectionTitleFocus820.20Management ResponsibilityQuality policy, org structure, management review820.30Design ControlsInput, output, review, verification, validation820.40Document ControlsApproval, distribution, change control820.50Purchasing ControlsSupplier qualification, purchasing data820.70Production ControlsProcess validation, environmental controls820.100CAPARoot cause analysis, corrective actions820.181Device Master RecordSpecifications, procedures, acceptance criteria

Design Controls Workflow (820.30)

Step 1: Design Input └── Capture user needs, intended use, regulatory requirements Verification: Inputs reviewed and approved? Step 2: Design Output └── Create specifications, drawings, software architecture Verification: Outputs traceable to inputs? Step 3: Design Review └── Conduct reviews at each phase milestone Verification: Review records with signatures? Step 4: Design Verification └── Perform testing against specifications Verification: All tests pass acceptance criteria? Step 5: Design Validation └── Confirm device meets user needs in actual use conditions Verification: Validation report approved? Step 6: Design Transfer └── Release to production with DMR complete Verification: Transfer checklist complete?

CAPA Process (820.100)

Identify: Document nonconformity or potential problem Investigate: Perform root cause analysis (5 Whys, Fishbone) Plan: Define corrective/preventive actions Implement: Execute actions, update documentation Verify: Confirm implementation complete Effectiveness: Monitor for recurrence (30-90 days) Close: Management approval and closure Reference: See qsr_compliance_requirements.md for detailed QSR implementation guidance.

HIPAA for Medical Devices

HIPAA requirements for devices that create, store, transmit, or access Protected Health Information (PHI).

Applicability

Device TypeHIPAA AppliesStandalone diagnostic (no data transmission)NoConnected device transmitting patient dataYesDevice with EHR integrationYesSaMD storing patient informationYesWellness app (no diagnosis)Only if stores PHI

Required Safeguards

Administrative (Β§164.308) β”œβ”€β”€ Security officer designation β”œβ”€β”€ Risk analysis and management β”œβ”€β”€ Workforce training β”œβ”€β”€ Incident response procedures └── Business associate agreements Physical (Β§164.310) β”œβ”€β”€ Facility access controls β”œβ”€β”€ Workstation security └── Device disposal procedures Technical (Β§164.312) β”œβ”€β”€ Access control (unique IDs, auto-logoff) β”œβ”€β”€ Audit controls (logging) β”œβ”€β”€ Integrity controls (checksums, hashes) β”œβ”€β”€ Authentication (MFA recommended) └── Transmission security (TLS 1.2+)

Risk Assessment Steps

Inventory all systems handling ePHI Document data flows (collection, storage, transmission) Identify threats and vulnerabilities Assess likelihood and impact Determine risk levels Implement controls Document residual risk Reference: See hipaa_compliance_framework.md for implementation checklists and BAA templates.

Device Cybersecurity

FDA cybersecurity requirements for connected medical devices.

Premarket Requirements

ElementDescriptionThreat ModelSTRIDE analysis, attack trees, trust boundariesSecurity ControlsAuthentication, encryption, access controlSBOMSoftware Bill of Materials (CycloneDX or SPDX)Security TestingPenetration testing, vulnerability scanningVulnerability PlanDisclosure process, patch management

Device Tier Classification

Tier 1 (Higher Risk): Connects to network/internet Cybersecurity incident could cause patient harm Tier 2 (Standard Risk): All other connected devices

Postmarket Obligations

Monitor NVD and ICS-CERT for vulnerabilities Assess applicability to device components Develop and test patches Communicate with customers Report to FDA per guidance

Coordinated Vulnerability Disclosure

Researcher Report ↓ Acknowledgment (48 hours) ↓ Initial Assessment (5 days) ↓ Fix Development ↓ Coordinated Public Disclosure Reference: See device_cybersecurity_guidance.md for SBOM format examples and threat modeling templates.

scripts/

ScriptPurposefda_submission_tracker.pyTrack 510(k)/PMA/De Novo submission milestones and timelinesqsr_compliance_checker.pyAssess 21 CFR 820 compliance against project documentationhipaa_risk_assessment.pyEvaluate HIPAA safeguards in medical device software

references/

FileContentfda_submission_guide.md510(k), De Novo, PMA submission requirements and checklistsqsr_compliance_requirements.md21 CFR 820 implementation guide with templateshipaa_compliance_framework.mdHIPAA Security Rule safeguards and BAA requirementsdevice_cybersecurity_guidance.mdFDA cybersecurity requirements, SBOM, threat modelingfda_capa_requirements.mdCAPA process, root cause analysis, effectiveness verification

Usage Examples

# Track FDA submission status python scripts/fda_submission_tracker.py /path/to/project --type 510k # Assess QSR compliance python scripts/qsr_compliance_checker.py /path/to/project --section 820.30 # Run HIPAA risk assessment python scripts/hipaa_risk_assessment.py /path/to/project --category technical

Category context

Agent frameworks, memory systems, reasoning layers, and model-native orchestration.

Source: Tencent SkillHub

Largest current source with strong distribution and engagement signals.

Package contents

Included in package
6 Docs
  • SKILL.md Primary doc
  • references/device_cybersecurity_guidance.md Docs
  • references/fda_capa_requirements.md Docs
  • references/fda_submission_guide.md Docs
  • references/hipaa_compliance_framework.md Docs
  • references/qsr_compliance_requirements.md Docs