cyber-essentials SKILL.md skillA

cyber-essentials from sushegaad/claude-skills-governance-risk-and-compliance is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.

Install it, pinned
mdr add sushegaad/claude-skills-governance-risk-and-compliance/cyber-essentials@git:20260914.dde0a0a

Pins git:20260914.dde0a0a in mdr.lock. Pin the fingerprint instead.

Audit grade
A, 17 of 17 checks passed
Kind
SKILL.md skill
Repository
sushegaad/claude-skills-governance-risk-and-compliance
Path
plugins/cyber-essentials/skills/cyber-essentials/SKILL.md
Versions recorded
1
Latest version
git:20260914.dde0a0a, committed Sep 14, 2026
Size
9,011 bytes
Repository stars
1,045
License
MIT

Expert UK Cyber Essentials and Cyber Essentials Plus advisor — the NCSC-owned, IASME-delivered baseline certification. Covers the current Danzell question set (Requirements for IT Infrastructure v3.3, mandatory for assessment accounts from April 27, 2026) and the Willow transition, the five control themes (firewalls, secure configuration, security update management, user access control, malware protection), scoping rules for cloud services, BYOD and home working, the 14-day critical-update…

Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.

What the file says

# Cyber Essentials / Cyber Essentials Plus (UK) Skill

> **Last verified:** 2026-09-14

You are an expert **Cyber Essentials assessor-adviser** for the UK's baseline cyber security certification — owned by the **NCSC**, delivered exclusively through **IASME** and its network of 400+ licensed Certification Bodies. The scheme is deliberately narrow and technical: five control themes applied across the in-scope estate.

## Version status (state in every assessment-planning answer)

- **Current: the "Danzell" question set + Requirements for IT Infrastructure v3.3** — applies to all assessment accounts created **from April 27, 2026** (published February 13, 2026).
- **Willow (v3.2)** applies only to accounts created before April 27, 2026, which have 6 months to certify (window closes ~late October 2026). Guidance written around "Willow as current" is out of date for new applicants.
…

Read the whole file at its exact version.

How to install

The exact contents, by fingerprint
mdr add sushegaad/claude-skills-governance-risk-and-compliance/cyber-essentials@sha256:66d53a541b4b24ff

The line at the top of this page pins the label git:20260914.dde0a0a, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.

Badge

mdr badge

[![mdr](https://markdownregistry.com/badge/art_qtasow3vpxmu52zy.svg)](https://markdownregistry.com/a/art_qtasow3vpxmu52zy)

4 badge image fetches in 30 days. What the badge shows.

Versions

The registry has recorded 1 version of this file, committed on Sep 14, 2026.

versioncommittedcommitsizeaudit
git:20260914.dde0a0a latest2026-09-14 dde0a0a 9,011 BA view

Audit of the latest version

A  17 of 17 checks passed. Fixed automatic checks with no AI involved, so the same checks give the same answer every run.
  • pass: Frontmatter block present
  • pass: Frontmatter declares a name
  • pass: Frontmatter declares a description
  • pass: Size between 200 bytes and 200 KB (9011 bytes)
  • pass: No zero-width or bidi control characters
  • pass: No instruction hidden inside an HTML comment
  • pass: No link to an exfiltration or paste host
  • pass: No credential-shaped string
  • pass: No instruction to send local credentials anywhere
  • pass: No text hidden with inline styles
  • pass: No prompt-injection phrasing
  • pass: No curl or wget piped into a shell
  • pass: No recursive delete of root, home or parent
  • pass: No instruction to read or print local credentials
  • pass: No base64 blob over 200 characters
  • pass: No link to a raw IP address
  • pass: No script tag

Source

GitHub

sushegaad/claude-skills-governance-risk-and-compliance · 1,045 stars · license MIT · pushed 2026-11-07 · branch main

API

GET https://markdownregistry.com/api/v1/artifacts/art_qtasow3vpxmu52zy
GET https://markdownregistry.com/api/v1/resolve?ref=sushegaad/claude-skills-governance-risk-and-compliance/cyber-essentials
GET https://markdownregistry.com/api/v1/blob/66d53a541b4b24ff59555a9f205ff5958aab72e5c45e1fb1e531be41c78351ee

Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.

Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.

More from sushegaad/claude-skills-governance-risk-and-compliance

ccpa SKILL.md skill
sushegaad/claude-skills-governance-risk-and-compliance · plugins/ccpa/skills/ccpa/SKILL.md · California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) compliance advisor — business threshold…
git:20261004.c5c0d4b · audit A · 1,045 stars
cis-controls SKILL.md skill
sushegaad/claude-skills-governance-risk-and-compliance · plugins/cis-controls/skills/cis-controls/SKILL.md · Expert CIS Controls v8 (CIS Top 18) advisor — implementation group scoping (IG1/IG2/IG3), control gap assessments…
git:20261004.c5c0d4b · audit A · 1,045 stars
cmmc SKILL.md skill
sushegaad/claude-skills-governance-risk-and-compliance · plugins/cmmc/skills/cmmc/SKILL.md · Expert CMMC 2.0 (Cybersecurity Maturity Model Certification) advisor for US defense contractors and subcontractors in…
git:20260915.968c0d2 · audit A · 1,045 stars
csrd SKILL.md skill
sushegaad/claude-skills-governance-risk-and-compliance · plugins/csrd/skills/csrd/SKILL.md · Expert CSRD (Corporate Sustainability Reporting Directive, EU 2022/2464) compliance advisor. Use this skill whenever a…
git:20261004.c5c0d4b · audit A · 1,045 stars
dora SKILL.md skill
sushegaad/claude-skills-governance-risk-and-compliance · plugins/dora/skills/dora/SKILL.md · Expert DORA (Regulation (EU) 2022/2554 — Digital Operational Resilience Act) compliance advisor for EU financial…
git:20260915.968c0d2 · audit A · 1,045 stars
dpdpa SKILL.md skill
sushegaad/claude-skills-governance-risk-and-compliance · plugins/dpdpa/skills/dpdpa/SKILL.md · Expert India Digital Personal Data Protection Act, 2023 (DPDPA) compliance advisor. Use this skill whenever a user asks…
git:20261004.c5c0d4b · audit A · 1,045 stars
ear SKILL.md skill
sushegaad/claude-skills-governance-risk-and-compliance · plugins/ear/skills/ear/SKILL.md · Export Administration Regulations (EAR, 15 CFR Parts 730-774) compliance advisor — ECCN classification across all 10…
git:20261107.f65027d · audit A · 1,045 stars
eu-ai-act SKILL.md skill
sushegaad/claude-skills-governance-risk-and-compliance · plugins/eu-ai-act/skills/eu-ai-act/SKILL.md · EU AI Act (Regulation (EU) 2024/1689) compliance advisor — risk classification across all four tiers, all 9 prohibited…
git:20261107.f65027d · audit A · 1,045 stars
eu-cra SKILL.md skill
sushegaad/claude-skills-governance-risk-and-compliance · plugins/eu-cra/skills/eu-cra/SKILL.md · Expert EU Cyber Resilience Act (CRA) advisor for Regulation (EU) 2024/2847 — mandatory cybersecurity and vulnerability…
git:20260915.968c0d2 · audit A · 1,045 stars
fedramp SKILL.md skill
sushegaad/claude-skills-governance-risk-and-compliance · plugins/fedramp/skills/fedramp/SKILL.md · Expert guidance for FedRAMP certification and compliance under CR26 (FedRAMP Consolidated Rules for 2026). Use this…
git:20261004.c5c0d4b · audit A · 1,045 stars
gdpr-compliance SKILL.md skill
sushegaad/claude-skills-governance-risk-and-compliance · plugins/gdpr-compliance/skills/gdpr-compliance/SKILL.md · Expert GDPR compliance assistant covering all four core workflows: (1) auditing code and systems for GDPR violations…
git:20261004.c5c0d4b · audit A · 1,045 stars
hipaa-compliance SKILL.md skill
sushegaad/claude-skills-governance-risk-and-compliance · plugins/hipaa-compliance/skills/hipaa-compliance/SKILL.md · Expert HIPAA compliance assistant for healthcare and software contexts. Use this skill whenever the user mentions…
git:20260905.988adcf · audit A · 1,045 stars

Every file in sushegaad/claude-skills-governance-risk-and-compliance

Browse by kind, by grade A, or by owner.