controls-gap-pack SKILL.md skillA
controls-gap-pack from kesslernity/awesome-copilot-cowork-skills is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add kesslernity/awesome-copilot-cowork-skills/controls-gap-pack@git:20260618.38724d8Pins git:20260618.38724d8 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- kesslernity/awesome-copilot-cowork-skills
- Path
skills/risk-ethics-compliance/controls-gap-pack/SKILL.md- Versions recorded
- 1
- Latest version
- git:20260618.38724d8, committed Jun 18, 2026
- Size
- 5,870 bytes
- Repository stars
- 45
- License
- CC-BY-SA-4.0
Reads a requirement, regulation, or policy and the organisation's control descriptions, then produces a DRAFT controls-and-gap pack — the requirement broken into obligations, mapped controls, apparent coverage, gaps, and actions to assess. Never concludes compliance or that a control is effective; control owners and audit assess. Use when the user asks to map a requirement to controls or run a controls gap analysis.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
## PURPOSE Read one requirement/regulation/policy (and, where provided, the organisation's control descriptions) and produce one DRAFT controls-and-gap pack: the requirement broken into discrete obligations, the control(s) that appear to address each, apparent coverage, gaps, actions to assess, and open questions. This prepares a controls assessment. It never concludes the organisation is compliant, that an obligation is met, or that a control is effective — those require human assessment and testing by control owners and audit. Obligations are jurisdiction-specific and change. Known limitation: the skill maps from the text provided; it cannot see whether a control actually operates. Coverage is "apparent" only, for owners to confirm and test. ## WHEN TO RUN Run when the user asks to map a requirement/regulation/standard/policy to controls, or to run a controls gap analysis. Do not run: - To conclude the organisation is compliant, or an obligation is met. - To assess that a control is effective or operating. - To accept or sign off risk. ## INPUTS YOU GATHER …
Read the whole file at its exact version.
How to install
mdr add kesslernity/awesome-copilot-cowork-skills/controls-gap-pack@sha256:046a0ab9a0d402d5The line at the top of this page pins the label git:20260618.38724d8, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_ya46gx4tgy2yvq5y)
4 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 1 version of this file, committed on Jun 18, 2026.
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (5870 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
kesslernity/awesome-copilot-cowork-skills · 45 stars · license CC-BY-SA-4.0 · pushed 2026-11-03 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_ya46gx4tgy2yvq5y GET https://markdownregistry.com/api/v1/resolve?ref=kesslernity/awesome-copilot-cowork-skills/controls-gap-pack GET https://markdownregistry.com/api/v1/blob/046a0ab9a0d402d530b17e4931342951e09783c062ebac164b9546a3572d968c
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.
More from kesslernity/awesome-copilot-cowork-skills
Every file in kesslernity/awesome-copilot-cowork-skills