Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
Read AGENTS.md. It covers installing skills from this library, running the whole library against a GRC setup, and submitting a skill.
The line at the top of this page pins the label git:20261019.7bad5d3, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
GET https://markdownregistry.com/api/v1/artifacts/art_td4kbyykhltzsubt
GET https://markdownregistry.com/api/v1/resolve?ref=better-isms/grcskills/CLAUDE.md
GET https://markdownregistry.com/api/v1/blob/eb1e7b0fcb1cae0cce212eaa25932c1556c69a62858476ea373b85ac412424fa
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
better-isms/grcskills · skills/.system/submit-skill/SKILL.md · Use this skill when someone wants to contribute, submit or publish a GRC skill to the grcskills
library…
better-isms/grcskills · skills/tristan-roth/acceptable-use-policy-drafting/SKILL.md · Use this skill when a company needs rules for how staff use company systems, data, devices and AI
tools, or asks "write…
better-isms/grcskills · skills/tristan-roth/access-review-campaign-prep/SKILL.md · Use this skill when a periodic user access review is due, an auditor asked for access review
evidence, or someone says…
better-isms/grcskills · skills/tristan-roth/ai-acceptable-use-rules/SKILL.md · Use this skill when staff already use AI assistants, coding tools or AI features and the company
needs rules people…
better-isms/grcskills · skills/tristan-roth/ai-act-risk-classification/SKILL.md · Use this skill when a company must work out where each of its AI systems sits under the EU AI Act,
and asks "is this…
better-isms/grcskills · skills/tristan-roth/ai-draft-challenge-review/SKILL.md · Use this skill when someone is about to sign or approve a GRC artefact an AI agent drafted (a
risk register…
better-isms/grcskills · skills/tristan-roth/ai-impact-assessment/SKILL.md · Use this skill when one AI system needs its impact on people and on the company assessed before
launch, after a…
better-isms/grcskills · skills/tristan-roth/ai-management-system-scope/SKILL.md · Use this skill when a company that already runs a security management system wants to add an AI
management system, or…
better-isms/grcskills · skills/tristan-roth/ai-system-inventory/SKILL.md · Use this skill when a company needs to know what AI it builds, buys or uses, before an AI
governance programme, an AI…
better-isms/grcskills · skills/tristan-roth/ai-vendor-due-diligence/SKILL.md · Use this skill when the company is about to buy, renew or switch on an AI product or an AI feature
inside an existing…
better-isms/grcskills · skills/tristan-roth/auditor-interview-prep/SKILL.md · Use this skill when process owners, engineers or executives will be interviewed in an external
or internal audit and…
