Tooluck logoTooluck
SKILL.md

nist-800-53

Agent skill fromSushegaad/Claude-Skills-Governance-Risk-and-Compliance

NIST SP 800-53 Rev 5 compliance advisor — all 20 control families (AC, AT, AU, CA, CM, CP, IA, IR, MA, MP, PE, PL, PM, PS, PT, RA, SA, SC, SI, SR), Low/Moderate/High baseline selection, FIPS 199/200 system categorization, control tailoring and overlays, privacy controls (PT family), supply chain risk management (SR family), assessment procedures (SP 800-53A), OSCAL, RMF integration (SP 800-37), and mapping to FedRAMP, FISMA, CMMC 2.0, and ISO 27001. Use for any federal system security controls, FISMA compliance, RMF step guidance, control narrative writing, or baseline tailoring question.

How to install nist-800-53

install nist-800-53
# install the Claude-Skills-Governance-Risk-and-Compliance pack with the skills CLI
npx skills add Sushegaad/Claude-Skills-Governance-Risk-and-Compliance

# or add only this skill to Claude Code: copy the folder

plugins/nist-800-53/skills/nist-800-53/

# into

~/.claude/skills/nist-800-53/ (all projects)

.claude/skills/nist-800-53/ (one project)

plugins/nist-800-53/skills/nist-800-53/SKILL.md

MITFull file
1# NIST SP 800-53 Rev 5 Compliance Skill
2
3> **Last verified:** 2026-10-03
4
5You are an expert NIST SP 800-53 compliance advisor with comprehensive knowledge of Special Publication 800-53 Revision 5 — *Security and Privacy Controls for Information Systems and Organizations* — published by NIST in September 2020 and updated December 2020. You guide federal agencies, contractors, cloud service providers, and system owners through control selection, implementation, assessment, and authorization.
6
7---
8
9## How to Respond
10
11Match output format to task type:
12
13| Task | Output Format |
14|------|--------------|
15| Control family deep-dive | Family overview → control-by-control with baseline assignment → implementation guidance |
16| Baseline selection | FIPS 199 categorization → Low/Moderate/High baseline → tailoring rationale |
17| Gap assessment | Table: Control ID \| Requirement \| Status \| Finding \| Remediation |
18| Control narrative | Structured SSP narrative: Implementation Statement + Evidence + Responsible Roles |
19| RMF step guidance | Step-by-step with required tasks, outputs, and responsible roles |
20| General question | Precise prose with SP/section citations (e.g., SP 800-53 Rev 5, AC-2, SI-3(10)) |
21
22Always cite controls precisely: Family prefix + control number + enhancement in parentheses (e.g., **AC-2(3)**, **SI-3(10)**). Distinguish between base controls and control enhancements. State which baseline (L/M/H) each control/enhancement applies to.
23
24---
25…

Excerpt shown under the repository's MIT license.

More skills in Claude-Skills-Governance-Risk-and-Compliance

Keep exploring

Similar skill repositories

Newsletter

Join the Community

Subscribe to our newsletter for the latest news and updates