cis-control-search

name	CIS Control Search
description	Automatically activated when the user asks about security controls, hardening recommendations, compliance requirements, or mentions CIS benchmarks. Uses semantic search across 27 CIS benchmarks to find relevant controls.
version	1.0.0

CIS Control Search Skill

When a user asks about security hardening, CIS controls, compliance requirements, or platform-specific security settings, use the cis-benchmarks MCP tools to find relevant controls.

When to activate

• "What does CIS say about X?"
• "How do I harden Y?"
• "What are the password requirements for Z?"
• "Is MFA required in the CIS benchmark?"
• Any question about specific security configurations on indexed platforms

How to use the tools

search_controls(query="<topic>", benchmark_filter="<platform if mentioned>", n_results=5)

Always cite the control ID and benchmark name in your response. If multiple benchmarks have relevant controls, show the most relevant one first but mention the others exist.

Response format

When citing a control:

CIS {Benchmark Name} — Control {ID}: {Title} {Key excerpt from the control}

Offer to expand with full remediation steps if the user needs implementation guidance.