quality-manager-qms-iso13485
ISO 13485 Quality Management System specialist for medical device companies. Provides QMS implementation, maintenance, process optimization, and compliance expertise. Use for QMS design, documentation control, management review, internal auditing, corrective actions, and ISO 13485 certification activities.
- License 许可
- MIT
- 最近更新
- 2026-11-14
- Stars
- ★ 3.3w
- Forks
- 3.9k
01 前言 Front Matter
- name
- quality-manager-qms-iso13485
- description
- ISO 13485 Quality Management System specialist for medical device companies. Provides QMS implementation, maintenance, process optimization, and compliance expertise. Use for QMS design, documentation control, management review, internal auditing, corrective actions, and ISO 13485 certification activities.
02 资源文件 3
- 资产文件assets/example_asset.txt865 B
- 参考文档references/api_reference.md979 B
- 脚本scripts/example.py615 B
03 SKILL.md 正文
Senior Quality Manager - QMS ISO 13485 Specialist
Expert-level ISO 13485 Quality Management System implementation and maintenance for medical device organizations with deep knowledge of quality processes, documentation control, and continuous improvement.
Core QMS Competencies
1. ISO 13485 QMS Implementation
Design and implement comprehensive quality management systems aligned with ISO 13485:2016 and regulatory requirements.
Implementation Workflow:
-
Gap Analysis and Planning
- Current state assessment against ISO 13485 requirements
- Gap identification and prioritization
- Implementation roadmap development
- Resource allocation and timeline planning
-
QMS Design and Documentation
- Quality Manual development per ISO 13485 clause 4.2.2
- Process documentation creation and mapping
- Procedure development following references/iso13485-procedures.md
- Work instruction standardization
-
Process Implementation
- Cross-functional training and competency development
- Process deployment and monitoring
- Performance metrics establishment
- Feedback loop integration
2. Document Control System (ISO 13485 Clause 4.2.3)
Establish and maintain robust document control processes ensuring compliance and traceability.
Document Control Framework:
DOCUMENT LIFECYCLE MANAGEMENT
├── Document Creation and Approval
│ ├── Template standardization
│ ├── Review and approval workflow
│ ├── Version control system
│ └── Release authorization
├── Document Distribution and Access
│ ├── Controlled distribution matrix
│ ├── Access permission management
│ ├── Electronic system integration
│ └── External document control
├── Document Maintenance and Updates
│ ├── Periodic review scheduling
│ ├── Change control procedures
│ ├── Impact assessment process
│ └── Superseded document management
└── Document Retention and Disposal
├── Retention period definition
├── Archive management system
├── Disposal authorization
└── Legal/regulatory compliance
3. Management Review Process (ISO 13485 Clause 5.6)
Facilitate effective management review meetings ensuring systematic QMS evaluation and improvement.
Management Review Structure:
- Quarterly Management Review meetings with senior leadership
- Input preparation covering all ISO 13485 clause 5.6.2 requirements
- Decision tracking and action item management
- Follow-up verification and effectiveness monitoring
Key Review Inputs:
- Audit results (internal and external)
- Customer feedback and complaints
- Process performance and product conformity
- Corrective and preventive actions status
- Changes affecting the QMS
- Improvement recommendations
4. Internal Audit Program (ISO 13485 Clause 8.2.2)
Design and execute comprehensive internal audit programs ensuring QMS effectiveness and continuous improvement.
Audit Program Management:
-
Annual Audit Planning
- Risk-based audit scheduling
- Competent auditor assignment
- Scope definition and criteria establishment
- Decision Point: Determine audit frequency based on process criticality
-
Audit Execution
- For Process Audits: Follow scripts/audit-checklists/process-audit.py
- For System Audits: Follow scripts/audit-checklists/system-audit.py
- For Product Audits: Follow scripts/audit-checklists/product-audit.py
-
Audit Follow-up
- Nonconformity management and CAPA initiation
- Corrective action verification
- Effectiveness assessment
- Audit report completion and distribution
QMS Process Optimization
Design Controls (ISO 13485 Clause 7.3)
Implement robust design controls ensuring systematic product development and risk management integration.
Design Control Stages:
- Design Planning (7.3.2)
- Design Inputs (7.3.3)
- Design Outputs (7.3.4)
- Design Review (7.3.5)
- Design Verification (7.3.6)
- Design Validation (7.3.7)
- Design Transfer (7.3.8)
- Design Changes (7.3.9)
Risk Management Integration (ISO 14971)
Ensure seamless integration of risk management processes throughout the QMS and product lifecycle.
Risk Management Workflow:
- Risk management planning and file establishment
- Risk analysis and risk evaluation
- Risk control implementation and verification
- Production and post-production information analysis
- Risk management file maintenance
Supplier Quality Management (ISO 13485 Clause 7.4)
Establish comprehensive supplier evaluation, selection, and monitoring processes.
Supplier Management Process:
- Supplier qualification and approval criteria
- Performance monitoring and evaluation
- Supplier audit programs
- Supplier corrective action management
- Supply chain risk assessment
QMS Performance Monitoring
Key Quality Indicators (KQIs)
Monitor these critical quality metrics:
- QMS Process Performance: Process cycle times, efficiency metrics
- Customer Satisfaction: Complaint trends, satisfaction surveys
- Internal Audit Effectiveness: Finding trends, closure rates
- CAPA Performance: Closure timelines, effectiveness measures
- Training Effectiveness: Competency assessments, compliance rates
Continuous Improvement
Improvement Methodology:
- Data Collection and Analysis
- Root Cause Analysis using references/root-cause-analysis-tools.md
- Improvement Planning and resource allocation
- Implementation and Monitoring
- Effectiveness Verification and standardization
Regulatory Interface Management
ISO 13485 Certification Maintenance
- Annual surveillance audit preparation
- Certification body relationship management
- Nonconformity resolution and follow-up
- Certificate maintenance and renewal planning
QMS Integration with Regulatory Requirements
- MDR Article 10 (Quality Management System) compliance
- FDA 21 CFR 820 (Quality System Regulation) alignment
- Other regulatory QMS requirements integration
- Regulatory inspection readiness
Resources
scripts/
qms-performance-dashboard.py: Automated QMS metrics tracking and reportingdocument-control-audit.py: Document control compliance verificationmanagement-review-prep.py: Management review input compilation automationaudit-checklists/: Comprehensive internal audit checklist generators
references/
iso13485-procedures.md: Standard operating procedures templatesdesign-control-templates.md: Design control documentation templatesrisk-management-integration.md: ISO 14971 integration guidelinessupplier-qualification-criteria.md: Supplier assessment frameworksroot-cause-analysis-tools.md: Problem-solving methodologies
assets/
qms-templates/: Quality manual, procedure, and work instruction templatesaudit-forms/: Internal audit report and checklist templatestraining-materials/: ISO 13485 training presentations and materialsprocess-flowcharts/: Visual process documentation templates
04 同仓库更多 Skills
wealthville-pool-scoring
Score DeFi liquidity pools before providing liquidity. Returns a 0-100 pool score and an Enter/Hold/Exit/Reduce/Avoid verdict with calibrated confidence for ~68,800 Solana pools and 575 EVM pools, plus a public miss-inclusive track record. Use when asked whether a pool is worth LPing into, which pools look best right now, or how accurate the scores have actually been.
technical-debt-auditor
Scans a codebase and produces a quantified technical debt report with a prioritized remediation plan. Analyzes dead code, TODO/FIXME/HACK markers, dependency staleness, complexity hotspots, code duplication signals, test coverage gaps, unused exports, and outdated patterns. Use this skill when the user asks to audit their codebase for tech debt, wants a health check of their code quality, says things like "where should I focus refactoring", "find code smells", "audit my codebase", "what technical debt do we have", "prioritize cleanup work", or asks about code quality metrics. Also trigger when the user mentions "code rot", "legacy cleanup", "refactoring priorities", or wants to understand the overall health of a project before a major effort. Trigger even if the user doesn't say "technical debt" explicitly — any request to systematically assess code quality and identify improvement priorities belongs here.
readonly-sql-guard
Make an agent's database access provably read-only. Use when an agent runs caller-supplied SQL against a production/ERP/analytics database (a "query" MCP tool, text-to-SQL, an admin console), or when reviewing DB-access code for write/DDL/side-effect/transaction-escape risks. Checks what a statement CALLS, not just its shape.
web-artifacts-builder
Suite of tools for creating elaborate, multi-component claude.ai HTML artifacts using modern frontend web technologies (React, Tailwind CSS, shadcn/ui). Use for complex artifacts requiring state management, routing, or shadcn/ui components - not for simple single-file HTML/JSX artifacts.
webapp-testing
Toolkit for interacting with and testing local web applications using Playwright. Supports verifying frontend functionality, debugging UI behavior, capturing browser screenshots, and viewing browser logs.
discernment-nudge
After you give a substantive answer or draft that the user may act on — advice or recommendations, drafted artifacts such as goals, plans, pitches, proposals, or emails, estimates or projections, analysis or interpretation of data, factual claims they may rely on, or a multi-step argument — invoke this skill BEFORE finalizing your reply and then, if it applies, append 2-3 short follow-up questions, each tied to something specific in what you just produced, that help the user check key facts, probe the reasoning or assumptions, and notice missing context. Do this at most once per conversation. Skip it when the user asked a trivial how-to or simple lookup, wants a purely educational explanation, asked you only to format, convert, or assemble a file from content they provided, is writing code they will run, is doing creative writing or casual chat, or already asked you to double-check, cite, or review — the skill file explains these boundaries and the exact output format.