isms-document-cleanup SKILL.md skillA

isms-document-cleanup from better-isms/grcskills is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.

Install it, pinned
mdr add better-isms/grcskills/isms-document-cleanup@git:20261030.e418034

Pins git:20261030.e418034 in mdr.lock. Pin the fingerprint instead.

Audit grade
A, 17 of 17 checks passed
Kind
SKILL.md skill
Repository
better-isms/grcskills
Path
skills/tristan-roth/isms-document-cleanup/SKILL.md
Versions recorded
1
Latest version
git:20261030.e418034, committed Oct 30, 2026
Size
8,489 bytes
Repository stars
56
License
MIT

Use this skill when an ISMS document (policy, procedure, statement of applicability or register) reads badly and someone asks "clean up this policy", "make this readable for the auditor", "this reads like AI wrote it", "deslop this document", "too much technical detail in the policy", "the revision history is a mess" or "tidy our ISMS documents before the audit". Rewrites the document so it reads like a competent person wrote it for an auditor, keeps every fact and obligation, proposes where…

Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.

What the file says

Use this when an ISMS document has grown by accretion: engineering detail in a policy, file paths in body text, self-correcting revision rows. Completed records (incident records, audit reports, review minutes, training logs) are evidence: never rewrite them; propose a correction note for the owner's record-correction practice. You get, in a new folder `./isms-document-cleanup/<document-name>/`: the clean version in the source's structure (`clean.md`), the change package (`changes.md`), and one note per receiving document with the text to add there (`moves/<receiving-document>.md`). This skill drafts for a human to review and sign; this skill never marks a control effective. The clean version and its move notes are one package: the owner approves and applies them together, or not at all.
…

Read the whole file at its exact version.

How to install

The exact contents, by fingerprint
mdr add better-isms/grcskills/isms-document-cleanup@sha256:3f0532e3e10c5bd0

The line at the top of this page pins the label git:20261030.e418034, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.

Badge

mdr badge

[![mdr](https://markdownregistry.com/badge/art_ohrgfqk3t6fqi3c4.svg)](https://markdownregistry.com/a/art_ohrgfqk3t6fqi3c4)

2 badge image fetches in 30 days. What the badge shows.

Versions

The registry has recorded 1 version of this file, committed on Oct 30, 2026.

versioncommittedcommitsizeaudit
git:20261030.e418034 latest2026-10-30 e418034 8,489 BA view

Audit of the latest version

A  17 of 17 checks passed. Fixed automatic checks with no AI involved, so the same checks give the same answer every run.
  • pass: Frontmatter block present
  • pass: Frontmatter declares a name
  • pass: Frontmatter declares a description
  • pass: Size between 200 bytes and 200 KB (8489 bytes)
  • pass: No zero-width or bidi control characters
  • pass: No instruction hidden inside an HTML comment
  • pass: No link to an exfiltration or paste host
  • pass: No credential-shaped string
  • pass: No instruction to send local credentials anywhere
  • pass: No text hidden with inline styles
  • pass: No prompt-injection phrasing
  • pass: No curl or wget piped into a shell
  • pass: No recursive delete of root, home or parent
  • pass: No instruction to read or print local credentials
  • pass: No base64 blob over 200 characters
  • pass: No link to a raw IP address
  • pass: No script tag

Source

GitHub

better-isms/grcskills · 56 stars · license MIT · pushed 2026-10-30 · branch main

API

GET https://markdownregistry.com/api/v1/artifacts/art_ohrgfqk3t6fqi3c4
GET https://markdownregistry.com/api/v1/resolve?ref=better-isms/grcskills/isms-document-cleanup
GET https://markdownregistry.com/api/v1/blob/3f0532e3e10c5bd0f7826c38eb1d368cd62ca1d2ac0871d0a41587d36cf3f966

Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.

Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.

More from better-isms/grcskills

AGENTS.md AGENTS.md file
better-isms/grcskills · AGENTS.md
git:20261030.b80ad7f · audit A · 56 stars
CLAUDE.md CLAUDE.md file
better-isms/grcskills · CLAUDE.md
git:20261019.7bad5d3 · audit B · 56 stars
submit-skill SKILL.md skill
better-isms/grcskills · skills/.system/submit-skill/SKILL.md · Use this skill when someone wants to contribute, submit or publish a GRC skill to the grcskills library…
git:20261027.690016c · audit A · 56 stars
acceptable-use-policy-drafting SKILL.md skill
better-isms/grcskills · skills/tristan-roth/acceptable-use-policy-drafting/SKILL.md · Use this skill when a company needs rules for how staff use company systems, data, devices and AI tools, or asks "write…
git:20261027.94f7f3e · audit A · 56 stars
access-review-campaign-prep SKILL.md skill
better-isms/grcskills · skills/tristan-roth/access-review-campaign-prep/SKILL.md · Use this skill when a periodic user access review is due, an auditor asked for access review evidence, or someone says…
git:20261027.690016c · audit A · 56 stars
ai-acceptable-use-rules SKILL.md skill
better-isms/grcskills · skills/tristan-roth/ai-acceptable-use-rules/SKILL.md · Use this skill when staff already use AI assistants, coding tools or AI features and the company needs rules people…
git:20261027.94f7f3e · audit A · 56 stars
ai-act-risk-classification SKILL.md skill
better-isms/grcskills · skills/tristan-roth/ai-act-risk-classification/SKILL.md · Use this skill when a company must work out where each of its AI systems sits under the EU AI Act, and asks "is this…
git:20261027.94f7f3e · audit A · 56 stars
ai-draft-challenge-review SKILL.md skill
better-isms/grcskills · skills/tristan-roth/ai-draft-challenge-review/SKILL.md · Use this skill when someone is about to sign or approve a GRC artefact an AI agent drafted (a risk register…
git:20261027.94f7f3e · audit A · 56 stars
ai-impact-assessment SKILL.md skill
better-isms/grcskills · skills/tristan-roth/ai-impact-assessment/SKILL.md · Use this skill when one AI system needs its impact on people and on the company assessed before launch, after a…
git:20261027.94f7f3e · audit A · 56 stars
ai-management-system-scope SKILL.md skill
better-isms/grcskills · skills/tristan-roth/ai-management-system-scope/SKILL.md · Use this skill when a company that already runs a security management system wants to add an AI management system, or…
git:20261027.94f7f3e · audit A · 56 stars
ai-system-inventory SKILL.md skill
better-isms/grcskills · skills/tristan-roth/ai-system-inventory/SKILL.md · Use this skill when a company needs to know what AI it builds, buys or uses, before an AI governance programme, an AI…
git:20261027.94f7f3e · audit A · 56 stars
ai-vendor-due-diligence SKILL.md skill
better-isms/grcskills · skills/tristan-roth/ai-vendor-due-diligence/SKILL.md · Use this skill when the company is about to buy, renew or switch on an AI product or an AI feature inside an existing…
git:20261027.94f7f3e · audit A · 56 stars

Every file in better-isms/grcskills

Browse by kind, by grade A, or by owner.