菜单
ISO 27001, NIST CSF 2.0, CIS Controls v8.1, EU CRA compliance mapping, multi-standard alignment per Hack23 ISMS policies
默认使用会先检查来源的 Prompt；你也可以切换为直接命令，或下载本地副本。
决定是否安装前，请先阅读 SKILL.md，以及 SkillsMP 当前展示的配套文件。
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
直接命令不会经过审查 Prompt；运行前请先检查来源。
npx skills add https://github.com/diegosouzapw/awesome-omni-skill --skill compliance-frameworks命令会保持在同一行。复制前请横向滚动并检查完整内容。
想先保存到本地？可下载 SkillsMP 当前能够提供的文件。
基于 SOC 职业分类
正在显示 SKILL.md
| name | compliance-frameworks |
| description | ISO 27001, NIST CSF 2.0, CIS Controls v8.1, EU CRA compliance mapping, multi-standard alignment per Hack23 ISMS policies |
| license | MIT |
This skill applies when:
This skill enforces Hack23 ISMS policies for multi-standard compliance alignment.
/**
* ISO 27001:2022 Control Implementation Matrix
*
* ISMS Policy: Compliance Framework Integration
* Evidence: https://github.com/Hack23/ISMS-PUBLIC/blob/main/Secure_Development_Policy.md#compliance-framework-integration
*/
const iso27001Controls = {
// A.5 Organizational Controls
'A.5.1': {
control: 'Policies for information security',
implementation: 'SECURITY.md, Open_Source_Policy.md, Secure_Development_Policy.md',
evidence: [
'https://github.com/Hack23/European-Parliament-MCP-Server/blob/main/SECURITY.md',
'https://github.com/Hack23/European-Parliament-MCP-Server/blob/main/Open_Source_Policy.md'
],
status: 'Implemented',
lastReview: '2026-02-16'
},
// A.8 Asset Management
'A.8.3': {
control: 'Handling of assets',
implementation: 'Input validation with Zod, data classification per Data_Classification_Policy.md',
evidence: [
'https://github.com/Hack23/European-Parliament-MCP-Server/blob/main/src/validation/',
'https://github.com/Hack23/ISMS-PUBLIC/blob/main/Data_Classification_Policy.md'
],
status: 'Implemented',
lastReview: '2026-02-16'
},
'A.8.10': {
control: 'Information deletion',
implementation: 'LRU cache with TTL, GDPR right to erasure support',
evidence: [
'https://github.com/Hack23/European-Parliament-MCP-Server/blob/main/src/cache.ts',
'https://github.com/Hack23/European-Parliament-MCP-Server/blob/main/.github/skills/gdpr-compliance/SKILL.md'
],
: ,
:
},
: {
: ,
: ,
: [
,
],
: ,
:
},
: {
: ,
: ,
: [
,
,
],
: ,
:
},
: {
: ,
: ,
: [
,
],
: ,
:
},
: {
: ,
: ,
: [
,
],
: ,
:
},
: {
: ,
: ,
: [
,
],
: ,
:
}
};
(): {
implemented = .(iso27001Controls).( c. === ).;
total = .(iso27001Controls).;
;
}
Policy Reference: Secure Development Policy Section 📜
Evidence: CIA ISO 27001 Mapping
/**
* NIST Cybersecurity Framework 2.0 Implementation
*
* Functions: GOVERN, IDENTIFY, PROTECT, DETECT, RESPOND, RECOVER
*/
const nistCSF2Mapping = {
// GOVERN (GV)
'GV.OC-01': {
function: 'GOVERN',
category: 'Organizational Context',
subcategory: 'Organizational mission, objectives, and activities are understood',
implementation: 'ISMS policies define organizational security requirements',
evidence: 'https://github.com/Hack23/ISMS-PUBLIC/blob/main/Information_Security_Policy.md'
},
'GV.RM-01': {
function: 'GOVERN',
category: 'Risk Management',
subcategory: 'Risk management objectives are established',
implementation: 'Threat modeling, risk register, classification framework',
evidence: [
'https://github.com/Hack23/European-Parliament-MCP-Server/blob/main/THREAT_MODEL.md',
'https://github.com/Hack23/ISMS-PUBLIC/blob/main/Risk_Register.md'
]
},
// IDENTIFY (ID)
'ID.AM-01': {
function: 'IDENTIFY',
category: 'Asset Management',
subcategory: 'Physical devices and systems are inventoried',
implementation: 'SBOM generation, dependency tracking, asset inventory',
evidence: [
'https://github.com/Hack23/European-Parliament-MCP-Server/releases',
'https://github.com/Hack23/European-Parliament-MCP-Server/blob/main/package-lock.json'
]
},
: {
: ,
: ,
: ,
: ,
: [
,
]
},
: {
: ,
: ,
: ,
: ,
:
},
: {
: ,
: ,
: ,
: ,
:
},
: {
: ,
: ,
: ,
: ,
:
},
: {
: ,
: ,
: ,
: ,
:
},
: {
: ,
: ,
: ,
: ,
:
}
};
Policy Reference: Secure Development Policy Section 📜
Evidence: Black Trigram NIST CSF Mapping
/**
* CIS Controls v8.1 Safeguards
* Implementation Groups: IG1 (Basic), IG2 (Foundational), IG3 (Organizational)
*/
const cisControlsMapping = {
// CIS Control 1: Inventory and Control of Enterprise Assets
'1.1': {
control: 'Establish and Maintain Detailed Enterprise Asset Inventory',
safeguard: 'Basic',
ig: 'IG1',
implementation: 'SBOM generation with CycloneDX, dependency tracking',
evidence: 'https://github.com/Hack23/European-Parliament-MCP-Server/releases/latest/download/sbom.json'
},
// CIS Control 2: Inventory and Control of Software Assets
'2.1': {
control: 'Establish and Maintain Software Inventory',
safeguard: 'Basic',
ig: 'IG1',
implementation: 'package.json, package-lock.json, SBOM',
evidence: 'https://github.com/Hack23/European-Parliament-MCP-Server/blob/main/package.json'
},
'2.3': {
control: 'Address Unauthorized Software',
safeguard: 'Basic',
ig: 'IG1',
implementation: 'License scanning with FOSSA, approved license list enforcement',
evidence: [
'https://app.fossa.com/projects/git%2Bgithub.com%2FHack23%2FEuropean-Parliament-MCP-Server',
'https://github.com/Hack23/ISMS-PUBLIC/blob/main/Open_Source_Policy.md#approved-licenses'
]
},
// CIS Control 3: Data Protection
'3.1': {
: ,
: ,
: ,
: ,
:
},
: {
: ,
: ,
: ,
: ,
:
},
: {
: ,
: ,
: ,
: ,
:
},
: {
: ,
: ,
: ,
: ,
:
},
: {
: ,
: ,
: ,
: ,
:
},
: {
: ,
: ,
: ,
: ,
: [
,
]
}
};
Policy Reference: Secure Development Policy Section 📜
/**
* EU Cyber Resilience Act Conformity Assessment
*
* ISMS Policy: Open Source Policy Section 🛡️
* Evidence: https://github.com/Hack23/ISMS-PUBLIC/blob/main/Open_Source_Policy.md#cra-conformity-assessment-evidence
*/
const craCompliance = {
product: 'European Parliament MCP Server',
classification: 'Important (Class I)', // Based on risk assessment
// Essential Requirements
essentialRequirements: {
security: {
'Art. 10': {
requirement: 'Products with digital elements shall be delivered without known exploitable vulnerabilities',
implementation: 'CodeQL scanning, Dependabot, npm audit, OSSF Scorecard ≥7.0',
evidence: [
'https://github.com/Hack23/European-Parliament-MCP-Server/security/code-scanning',
'https://securityscorecards.dev/viewer/?uri=github.com/Hack23/European-Parliament-MCP-Server'
]
},
'Art. 11': {
requirement: 'Products shall be delivered with a secure by default configuration',
implementation: 'Security by design, threat modeling, input validation mandatory',
evidence: 'https://github.com/Hack23/European-Parliament-MCP-Server/blob/main/THREAT_MODEL.md'
}
},
updates: {
'Art. 12': {
requirement: 'Manufacturers shall provide security updates for the expected lifetime',
implementation: 'Dependabot automated updates, 5-year support lifecycle',
evidence: 'https://github.com/Hack23/European-Parliament-MCP-Server/blob/main/SECURITY.md#supported-versions'
}
},
documentation: {
: {
: ,
: ,
:
}
},
: {
: {
: ,
: ,
:
}
}
},
: {
: ,
: ,
: ,
: {
: ,
: ,
: ,
:
}
}
};
Policy Reference: Open Source Policy Section 🛡️
// Just code, no compliance documentation
Last compliance review: 2022 // More than 1 year old!
Citizen Intelligence Agency (CIA)
Black Trigram Game
CIA Compliance Manager
This skill enforces:
Policy Reference: Hack23 ISMS-PUBLIC