Medical Device Firmware Safety & Compliance Review
Review medical device firmware for FDA/ISO compliance gaps and risks
What You Can Do
Conduct rapid, comprehensive safety and regulatory compliance reviews of medical device firmware. You provide source code, design documentation, or test results—Claude analyzes against FDA guidance, ISO 62304, IEC 61508, and industry best practices to identify compliance gaps, security vulnerabilities, and design risks. Get detailed findings reports with remediation priorities and regulatory mapping.
Features
validates electronic record controls, audit trails, and authentication requirements
maps firmware components to development, verification, and traceability requirements
identifies SIL/ASIL levels and validation evidence gaps
detects OWASP Top 10, input validation flaws, weak cryptography, and secure boot issues
generates failure mode analysis with safety impact ratings and mitigation strategies
assesses unit, integration, system, and acceptance test coverage against requirements
creates requirements-to-design-to-test mappings for submission evidence
Example Output
Example 1: Firmware Code Review Finding
- ⚠️ CRITICAL – IEC 61508 SIL2 Violation
Component: sensor_driver.c, line 145
Issue: Unvalidated ADC input directly used in safety-critical dose calculation
Risk: Rogue sensor value causes overdose or underdose
Remedy: Add range bounds validation with documented safe limits; implement exception handling
Standard: ISO 62304:2015 Section 7.2 (Software Design)
Effort: 4 hours to implement, 2 hours to test
Example 2: Compliance Gap
- ❌ MISSING – FDA Traceability Evidence
Gap: No documented link between design requirements and test cases
Impact: Cannot demonstrate verification completeness per FDA guidance
Evidence Needed: Requirements Traceability Matrix (RTM) with requirement-to-test cross-reference
Closure: 2-3 days to create RTM and close mapping gaps
Example 3: Security Risk
- 🔒 HIGH – Wireless Authentication Bypass
Component: wireless_comms.c, uart_receive()
Issue: No authentication on device configuration commands
Exposure: Proximity attacker can reconfigure safety parameters
Mitigation: Implement HMAC-SHA256 with device-specific key; add command audit logging
Standard: IEC 62304 Section 8 (Software Verification)
What's Included
- SKILL.md: Complete firmware review framework with regulatory decision trees and finding severity templates
- FDA Compliance Checklist: 50+ control points for 21 CFR Part 11 and predicate device strategy
- ISO 62304 Traceability Matrix Template: Map development activities to lifecycle processes and verification evidence
- Security Review Worksheet: Guided OWASP/embedded security assessment tailored for medical devices
- FMEA Severity Rating Guide: Failure mode impact analysis with IEC 61508 SIL correlation
- Test Coverage Rubric: Unit, integration, system, and acceptance test adequacy assessment
- FDA Finding Report Template: Severity tiers, regulatory citations, remediation tracking, and submission-readiness summary
Who It's For
- Firmware engineers — pre-QA safety review and design validation before submission
- Quality/Regulatory managers — compliance evidence collection and audit preparation
- FDA regulatory specialists — 510(k)/PMA submission strategy and readiness assessment
- Security architects — embedded system threat modeling and vulnerability prioritization
- Contract manufacturers — third-party vendor firmware qualification and OEM validation
Best For
- Pre-submission regulatory strategy and compliance gap identification
- Design review and architecture safety assessment before coding
- Firmware code security and safety vulnerability screening
- FDA/ISO compliance evidence compilation and traceability mapping
- Third-party vendor firmware audit and supplier qualification
You might also like
You can accelerate your entire antenna design workflow—from initial concept to optimized specifications—by leveraging Claude's knowledge of electromagnetic theory, antenna types, and design trade-offs. Claude helps you parameterize designs, identify optimal configurations for your frequency band and application, and prepare detailed briefs for simulation and manufacturing. You'll generate design reviews, impedance-matching solutions, and validation checklists without context-switching to multiple tools.
Rapidly analyze production incidents by correlating observability signals—logs, metrics, traces, and events—to identify the true root cause instead of symptoms. You'll reconstruct incident timelines, quantify impact scope, and generate both immediate remediation steps and long-term prevention measures.
This skill guides you through designing Kalman filters for your specific state estimation and sensor fusion problems. You'll learn to diagnose filter divergence, tune covariance matrices (Q and R), and validate observability—turning mathematical theory into production-ready filters. The skill provides step-by-step workflows, diagnostic tools, and practical templates for common applications like GPS/IMU fusion, SLAM, and aircraft navigation.
Claude analyzes your code diffs and generates standardized commit messages that follow the Conventional Commits specification. The skill automatically determines the correct commit type, scope, and description based on the changes you've made, ensuring your messages are parseable by automation tools while remaining human-readable for code reviewers.
You'll transform high-level feature requirements into a complete development plan covering API design, frontend implementation, testing strategy, and documentation. The skill helps you identify dependencies, parallelize work across frontend and backend teams, and establish quality gates that ensure features ship bug-free with proper error handling and logging.
Transform schema and data changes into production-ready migration packages that protect data integrity and minimize downtime. You can handle column additions, renames, type conversions, and backfills using proven patterns like expand-contract and shadow tables. The skill generates explicit rollback scripts, validation checklists, and phased execution plans that keep applications stable throughout the migration.
You can design end-to-end NGS pipelines tailored to your experiment type (WGS, WES, RNA-seq, targeted), troubleshoot pipeline failures by analyzing QC metrics and logs, and optimize performance by fine-tuning parameters and identifying bottlenecks. This skill handles the full workflow from raw sequencing data quality assessment through variant interpretation and annotation.
You can rapidly design, optimize, and validate chromatographic and LC-MS/MS methods for analyzing drugs and metabolites in biological matrices. This skill guides you through analytical method development workflows—including parameter selection, sensitivity optimization, and regulatory strategy—while ensuring ICH Q2(R2) and FDA compliance throughout the development process.