Requirements
- Target platform
- OpenClaw
- Install method
- Manual import
- Extraction
- Extract archive
- Prerequisites
- OpenClaw
- Primary doc
- SKILL.md
FDA regulatory consultant for medical device companies. Provides 510(k)/PMA/De Novo pathway guidance, QSR (21 CFR 820) compliance, HIPAA assessments, and device cybersecurity. Use when user mentions FDA submission, 510(k), PMA, De Novo, QSR, premarket, predicate device, substantial equivalence, HIPAA medical device, or FDA cybersecurity.
FDA regulatory consultant for medical device companies. Provides 510(k)/PMA/De Novo pathway guidance, QSR (21 CFR 820) compliance, HIPAA assessments, and device cybersecurity. Use when user mentions FDA submission, 510(k), PMA, De Novo, QSR, premarket, predicate device, substantial equivalence, HIPAA medical device, or FDA cybersecurity.
Hand the extracted package to your coding agent with a concrete install brief instead of figuring it out manually.
I downloaded a skill package from Yavira. Read SKILL.md from the extracted folder and install it by following the included instructions. Tell me what you changed and call out any manual steps you could not complete.
I downloaded an updated skill package from Yavira. Read SKILL.md from the extracted folder, compare it with my current installation, and upgrade it while preserving any custom configuration unless the package docs explicitly say otherwise. Summarize what changed and any follow-up checks I should run.
FDA regulatory consulting for medical device manufacturers covering submission pathways, Quality System Regulation (QSR), HIPAA compliance, and device cybersecurity requirements.
FDA Pathway Selection 510(k) Submission Process QSR Compliance HIPAA for Medical Devices Device Cybersecurity Resources
Determine the appropriate FDA regulatory pathway based on device classification and predicate availability.
Predicate device exists? βββ YES β Substantially equivalent? β βββ YES β 510(k) Pathway β β βββ No design changes β Abbreviated 510(k) β β βββ Manufacturing only β Special 510(k) β β βββ Design/performance β Traditional 510(k) β βββ NO β PMA or De Novo βββ NO β Novel device? βββ Low-to-moderate risk β De Novo βββ High risk (Class III) β PMA
PathwayWhen to UseTimelineCost510(k) TraditionalPredicate exists, design changes90 days$21,760510(k) SpecialManufacturing changes only30 days$21,760510(k) AbbreviatedGuidance/standard conformance30 days$21,760De NovoNovel, low-moderate risk150 days$134,676PMAClass III, no predicate180+ days$425,000+
Identify product code and classification Search 510(k) database for predicates Assess substantial equivalence feasibility Prepare Q-Sub questions for FDA Schedule Pre-Sub meeting if needed Reference: See fda_submission_guide.md for pathway decision matrices and submission requirements.
Phase 1: Planning βββ Step 1: Identify predicate device(s) βββ Step 2: Compare intended use and technology βββ Step 3: Determine testing requirements βββ Checkpoint: SE argument feasible? Phase 2: Preparation βββ Step 4: Complete performance testing βββ Step 5: Prepare device description βββ Step 6: Document SE comparison βββ Step 7: Finalize labeling βββ Checkpoint: All required sections complete? Phase 3: Submission βββ Step 8: Assemble submission package βββ Step 9: Submit via eSTAR βββ Step 10: Track acknowledgment βββ Checkpoint: Submission accepted? Phase 4: Review βββ Step 11: Monitor review status βββ Step 12: Respond to AI requests βββ Step 13: Receive decision βββ Verification: SE letter received?
SectionContentCover LetterSubmission type, device ID, contact infoForm 3514CDRH premarket review cover sheetDevice DescriptionPhysical description, principles of operationIndications for UseForm 3881, patient population, use environmentSE ComparisonSide-by-side comparison with predicatePerformance TestingBench, biocompatibility, electrical safetySoftware DocumentationLevel of concern, hazard analysis (IEC 62304)LabelingIFU, package labels, warnings510(k) SummaryPublic summary of submission
IssuePreventionMissing user feeVerify payment before submissionIncomplete Form 3514Review all fields, ensure signatureNo predicate identifiedConfirm K-number in FDA databaseInadequate SE comparisonAddress all technological characteristics
Quality System Regulation (21 CFR Part 820) requirements for medical device manufacturers.
SectionTitleFocus820.20Management ResponsibilityQuality policy, org structure, management review820.30Design ControlsInput, output, review, verification, validation820.40Document ControlsApproval, distribution, change control820.50Purchasing ControlsSupplier qualification, purchasing data820.70Production ControlsProcess validation, environmental controls820.100CAPARoot cause analysis, corrective actions820.181Device Master RecordSpecifications, procedures, acceptance criteria
Step 1: Design Input βββ Capture user needs, intended use, regulatory requirements Verification: Inputs reviewed and approved? Step 2: Design Output βββ Create specifications, drawings, software architecture Verification: Outputs traceable to inputs? Step 3: Design Review βββ Conduct reviews at each phase milestone Verification: Review records with signatures? Step 4: Design Verification βββ Perform testing against specifications Verification: All tests pass acceptance criteria? Step 5: Design Validation βββ Confirm device meets user needs in actual use conditions Verification: Validation report approved? Step 6: Design Transfer βββ Release to production with DMR complete Verification: Transfer checklist complete?
Identify: Document nonconformity or potential problem Investigate: Perform root cause analysis (5 Whys, Fishbone) Plan: Define corrective/preventive actions Implement: Execute actions, update documentation Verify: Confirm implementation complete Effectiveness: Monitor for recurrence (30-90 days) Close: Management approval and closure Reference: See qsr_compliance_requirements.md for detailed QSR implementation guidance.
HIPAA requirements for devices that create, store, transmit, or access Protected Health Information (PHI).
Device TypeHIPAA AppliesStandalone diagnostic (no data transmission)NoConnected device transmitting patient dataYesDevice with EHR integrationYesSaMD storing patient informationYesWellness app (no diagnosis)Only if stores PHI
Administrative (Β§164.308) βββ Security officer designation βββ Risk analysis and management βββ Workforce training βββ Incident response procedures βββ Business associate agreements Physical (Β§164.310) βββ Facility access controls βββ Workstation security βββ Device disposal procedures Technical (Β§164.312) βββ Access control (unique IDs, auto-logoff) βββ Audit controls (logging) βββ Integrity controls (checksums, hashes) βββ Authentication (MFA recommended) βββ Transmission security (TLS 1.2+)
Inventory all systems handling ePHI Document data flows (collection, storage, transmission) Identify threats and vulnerabilities Assess likelihood and impact Determine risk levels Implement controls Document residual risk Reference: See hipaa_compliance_framework.md for implementation checklists and BAA templates.
FDA cybersecurity requirements for connected medical devices.
ElementDescriptionThreat ModelSTRIDE analysis, attack trees, trust boundariesSecurity ControlsAuthentication, encryption, access controlSBOMSoftware Bill of Materials (CycloneDX or SPDX)Security TestingPenetration testing, vulnerability scanningVulnerability PlanDisclosure process, patch management
Tier 1 (Higher Risk): Connects to network/internet Cybersecurity incident could cause patient harm Tier 2 (Standard Risk): All other connected devices
Monitor NVD and ICS-CERT for vulnerabilities Assess applicability to device components Develop and test patches Communicate with customers Report to FDA per guidance
Researcher Report β Acknowledgment (48 hours) β Initial Assessment (5 days) β Fix Development β Coordinated Public Disclosure Reference: See device_cybersecurity_guidance.md for SBOM format examples and threat modeling templates.
ScriptPurposefda_submission_tracker.pyTrack 510(k)/PMA/De Novo submission milestones and timelinesqsr_compliance_checker.pyAssess 21 CFR 820 compliance against project documentationhipaa_risk_assessment.pyEvaluate HIPAA safeguards in medical device software
FileContentfda_submission_guide.md510(k), De Novo, PMA submission requirements and checklistsqsr_compliance_requirements.md21 CFR 820 implementation guide with templateshipaa_compliance_framework.mdHIPAA Security Rule safeguards and BAA requirementsdevice_cybersecurity_guidance.mdFDA cybersecurity requirements, SBOM, threat modelingfda_capa_requirements.mdCAPA process, root cause analysis, effectiveness verification
# Track FDA submission status python scripts/fda_submission_tracker.py /path/to/project --type 510k # Assess QSR compliance python scripts/qsr_compliance_checker.py /path/to/project --section 820.30 # Run HIPAA risk assessment python scripts/hipaa_risk_assessment.py /path/to/project --category technical
Agent frameworks, memory systems, reasoning layers, and model-native orchestration.
Largest current source with strong distribution and engagement signals.