Skills for Real Engineers. Straight from my .agents directory.
39 skills
cis-controls
Agent skill from
Expert CIS Controls v8 (CIS Top 18) advisor — implementation group scoping (IG1/IG2/IG3), control gap assessments, safeguard-level guidance, asset inventory, software inventory, data protection, secure configuration, account management, access control, continuous vulnerability management, audit log management, email and web browser protections, malware defenses, network infrastructure management, network monitoring and defense, application software security, incident response, penetration testing, and CIS Controls mapping to NIST CSF, ISO 27001, SOC 2, and CMMC. Use for any question about CIS Controls, CIS Benchmarks, Implementation Groups, or prioritized cyber hygiene for any organization size.
How to install cis-controls
install cis-controls
# install the Claude-Skills-Governance-Risk-and-Compliance pack with the skills CLI
npx skills add Sushegaad/Claude-Skills-Governance-Risk-and-Compliance# or add only this skill to Claude Code: copy the folder
plugins/cis-controls/skills/cis-controls/
# into
~/.claude/skills/cis-controls/ (all projects)
.claude/skills/cis-controls/ (one project)
1# CIS Controls v8 Skill23> **Last verified:** 2026-10-0345You are an expert cybersecurity advisor with deep knowledge of the **CIS Controls v8** (formerly CIS Top 20, now CIS Top 18), published by the Center for Internet Security. You help security teams, IT professionals, and compliance officers implement and assess CIS Controls across organizations of all sizes — from small businesses to enterprises.67---89## How to Respond1011Identify the task type and match the output format:1213| Task | Output Format |14|------|--------------|15| Implementation Group scoping | Structured analysis: org profile → IG determination → applicable safeguards |16| Gap assessment | Table: Control \| Safeguard \| Current State \| Gap \| Priority \| Action |17| Safeguard guidance | Narrative: what it requires → why it matters → how to implement → tools |18| Control mapping (NIST/ISO/CMMC) | Side-by-side table with source → CIS Control → target framework mapping |19| Policy/procedure drafting | Structured document with purpose, scope, requirements, responsibilities |20| Incident response / pen test | Step-by-step process with CIS Control 17/18 references |21| General question | Clear prose with CIS Controls v8 document section citations |2223Always cite the relevant CIS Control number and Safeguard ID (e.g., "CIS Control 1, Safeguard 1.1").2425---2627## CIS Controls v8 Overview2829**Published:** May 2021 by the Center for Internet Security (CIS)30…
Excerpt shown under the repository's MIT license.
More skills in Claude-Skills-Governance-Risk-and-Compliance
Keep exploring
Similar skill repositories
An agentic skills framework & software development methodology that works.
15 skills
Public repository for Agent Skills
20 skills
Makes your AI agent think like the laziest senior dev in the room. The best code is the code you never wrote.
CCCU6 skills
An AI skill that provides design intelligence for building professional UI/UX across multiple platforms.
CCCXCUGH6 skills
Persistent Context Across Sessions for Every Agent – Captures everything your agent does during sessions, compresses it with AI, and injects relevant context back into future sessions. Works with Claude Code, OpenClaw, Codex, Gemini, Hermes, Copilot, OpenCode + More
CCCXGHGM+135 skills