Tooluck logoTooluck
SKILL.md

eu-cra

Agent skill fromSushegaad/Claude-Skills-Governance-Risk-and-Compliance

Expert EU Cyber Resilience Act (CRA) advisor for Regulation (EU) 2024/2847 — mandatory cybersecurity and vulnerability handling requirements for all products with digital elements (PDEs) sold in the EU. Use this skill for gap analysis, product classification (Default / Class I / Class II), conformity assessment route selection, CE marking, SBOM requirements, vulnerability and incident reporting to ENISA/CSIRTs, support period obligations, and manufacturer/importer/distributor duties. Trigger for EU CRA, Cyber Resilience Act, PDE compliance, Annex I requirements, SBOM EU, CE marking cybersecurity, or connected product security EU.

How to install eu-cra

install eu-cra
# install the Claude-Skills-Governance-Risk-and-Compliance pack with the skills CLI
npx skills add Sushegaad/Claude-Skills-Governance-Risk-and-Compliance

# or add only this skill to Claude Code: copy the folder

plugins/eu-cra/skills/eu-cra/

# into

~/.claude/skills/eu-cra/ (all projects)

.claude/skills/eu-cra/ (one project)

plugins/eu-cra/skills/eu-cra/SKILL.md

MITFull file
1# EU Cyber Resilience Act (CRA) Skill
2
3> **Last verified:** 2026-09-14
4
5## Overview
6
7You are an expert advisor on **Regulation (EU) 2024/2847 — the EU Cyber Resilience Act (CRA)**, published in the Official Journal on 20 November 2024. The CRA entered into force on **10 December 2024** and applies in a staggered timeline:
8
9| Milestone | Date |
10|---|---|
11| Entry into force | 10 December 2024 |
12| Vulnerability & incident reporting obligations | **11 September 2026 — NOW IN FORCE** |
13| Notified body obligations | 11 December 2026 |
14| **Full application (all obligations)** | **11 December 2027** |
15
16The CRA applies to all **Products with Digital Elements (PDEs)** — any hardware or software with network connectivity — sold or made available in the EU. It covers manufacturers, importers, and distributors in the supply chain.
17
18**Read the reference files before drafting detailed guidance:**
19- `references/essential-requirements.md` — Annex I essential requirements, product categories, support period, SBOM, vulnerability handling, reporting obligations
20- `references/conformity-assessment.md` — conformity assessment routes by product class, CE marking process, DoC, notified bodies, market surveillance, penalties
21
22---
23
24## Core Concepts
25
26### Scope — What is a Product with Digital Elements (PDE)?
27
28A PDE is any **software or hardware product and its remote data processing solutions** that has at least one network interface enabling data communication. This includes:
29…

Excerpt shown under the repository's MIT license.

More skills in Claude-Skills-Governance-Risk-and-Compliance

Keep exploring

Similar skill repositories

thedotmack /

claude-mem
116k

Persistent Context Across Sessions for Every Agent – Captures everything your agent does during sessions, compresses it with AI, and injects relevant context back into future sessions. Works with Claude Code, OpenClaw, Codex, Gemini, Hermes, Copilot, OpenCode + More

CCCXGHGM+135 skills

Newsletter

Join the Community

Subscribe to our newsletter for the latest news and updates