ansvar-vulnerability-management

Twenty compliance skills for EU security work: four standalone skills (STRIDE/LINDDUN regulatory threat modeling, incident-reporting navigation across NIS2/GDPR/DORA/CRA, CRA vulnerability obligations, and the iso-standards-expert skill) plus the Ansvar workflow skill library (using-ansvar, gap analysis, threat modelling, DPIA/FRIA, TARA, tender review, vulnerability decisions, tabletop, document review, drone SORA, product applicability register, vulnerability management, zero trust assessment, CMMC base, Level 1 and Level 2 self-assessments; sixteen library skills) — every claim cited from officially published or licensed text via the Ansvar Gateway MCP connector (free plan available, business sign-up).

26 skills · 1 MCP server

Run CMMC Level 1 and Level 2 self-assessments under 32 CFR Part 170 with cited NIST SP 800-171 requirements and objectives, human-attested evidence, the engine's result and status, the POA&M Level 2 allows, SPRS inputs, and the affirmation or a reviewer sign-off. A self-assessment aid, not a C3PAO assessment or legal advice. Includes using-ansvar for cited legal and standards questions. Try: 'Using Ansvar, run a CMMC Level 1 self-assessment for our company.'

3 skills · 1 MCP server

Assess zero trust maturity against CISA ZTMM v2.0 with fetched guidance, interview or twin evidence, a gap register and a roadmap for the next cycle. Includes using-ansvar for cited legal and standards questions.

2 skills · 1 MCP server

Security review, dependency scanning, policy gates, and CVE monitoring

2 skills · 1 command · 1 agent

Vulnerability intelligence and remediation skills for Claude Code — 7 skills for exploit analysis, fix proposals, scoring, exploits, and package security via the Vulnetix VDB API

7 skills

Comprehensive vulnerability scanning for code, dependencies, and configurations with CVE detection

1 skill · 1 command

Check npm packages for malware, known vulnerabilities, typosquats and maintainer takeovers before installing, via npmscan.com's free, read-only MCP server (23 tools, no API key).

5 skills · 1 MCP server

CIS Controls v8 (CIS Top 18) advisor — Implementation Group scoping (IG1/IG2/IG3), gap assessments across all 153 safeguards, asset/software inventory, data protection, secure configuration, MFA and access control, vulnerability management, audit log management, malware defenses, incident response, penetration testing, and CIS Controls mapping to NIST CSF 2.0, ISO 27001:2022, SOC 2, PCI DSS, and CMMC 2.0. Use for any CIS Controls, CIS Benchmarks, or prioritized cyber hygiene question.

1 skill

Cited EU Cyber Resilience Act assessment for a product with digital elements: scope, product classification, role-specific vulnerability-handling duties, and Article 14 reporting - joined with live CVE / CISA-KEV / EPSS vulnerability intelligence, and a NIS2 / GDPR / DORA entity-level screen. Requires the free Ansvar Gateway MCP connector; every legal claim is fetched from official publisher text at answer time and cited, never answered from model memory.

200 skills