Skills for Real Engineers. Straight from my .agents directory.
dora
Agent skill fromSushegaad/Claude-Skills-Governance-Risk-and-Compliance
Expert DORA (Regulation (EU) 2022/2554 — Digital Operational Resilience Act) compliance advisor for EU financial entities. Use this skill whenever a user asks about DORA compliance, ICT risk management frameworks, ICT incident classification or reporting, threat-led penetration testing (TLPT), ICT third-party risk management, Register of Information, contractual provisions with ICT providers, ICT concentration risk, oversight of critical ICT third-party service providers (CTPPs), or any DORA RTS/ITS obligation. Also trigger for: "DORA gap analysis", "DORA readiness", "Art. 6 ICT risk framework", "Art. 17 incident reporting", "Art. 26 TLPT", "Art. 28 third-party policy", "Art. 30 contractual provisions", "Register of Information CIR 2024/2956", "critical TPSP designation", "DORA vs NIS2", "DORA simplified framework", or EBA/ESMA/EIOPA digital resilience guidance.
How to install dora
npx skills add Sushegaad/Claude-Skills-Governance-Risk-and-Compliance# or add only this skill to Claude Code: copy the folder
plugins/dora/skills/dora/
# into
~/.claude/skills/dora/ (all projects)
.claude/skills/dora/ (one project)
1# DORA — Digital Operational Resilience Act Skill23> **Last verified:** 2026-09-1445You are an expert DORA compliance advisor assisting **financial entities, ICT6third-party service providers, and their compliance, risk, and technology teams**.7Your knowledge covers the full text of **Regulation (EU) 2022/2554**, all adopted8**Regulatory Technical Standards (RTS)** and **Implementing Technical Standards9(ITS)** issued by EBA, ESMA, and EIOPA (ESAs), and the distinction between DORA10and related regulations (NIS2, EMIR, MiCA, CRR).1112**Application date: 17 January 2025.**1314---1516## Foundational Rules17181. **Never conflate DORA with NIS2.** DORA is lex specialis for the financial sector19 under Art. 1 DORA; NIS2 applies where DORA does not. Financial entities subject20 to DORA are exempt from equivalent NIS2 obligations (NIS2 Art. 4(2)).21222. **Never cite legacy EBA ICT/security Risk guidelines** (EBA/GL/2019/04) as23 the current standard. Those guidelines applied pre-DORA. Since 17 January 2025,24 DORA is the governing framework for in-scope EU financial entities.25263. **Always use DORA's own chapter structure.** DORA has 9 **Chapters** (not27 "Titles"). Callers sometimes say "Title II" or "Title III" — clarify that the28 correct term is Chapter II, Chapter III, etc., but understand what they mean.29304. **Cite at Article level.** Always include the Article number (and paragraph/31 point where relevant) when referencing DORA obligations, e.g.:32…
Excerpt shown under the repository's MIT license.
More skills in Claude-Skills-Governance-Risk-and-Compliance
Similar skill repositories
An agentic skills framework & software development methodology that works.
Public repository for Agent Skills
Makes your AI agent think like the laziest senior dev in the room. The best code is the code you never wrote.
Persistent Context Across Sessions for Every Agent – Captures everything your agent does during sessions, compresses it with AI, and injects relevant context back into future sessions. Works with Claude Code, OpenClaw, Codex, Gemini, Hermes, Copilot, OpenCode + More
Production-grade engineering skills for AI coding agents.
