ansvar-zero-trust

Twenty compliance skills for EU security work: four standalone skills (STRIDE/LINDDUN regulatory threat modeling, incident-reporting navigation across NIS2/GDPR/DORA/CRA, CRA vulnerability obligations, and the iso-standards-expert skill) plus the Ansvar workflow skill library (using-ansvar, gap analysis, threat modelling, DPIA/FRIA, TARA, tender review, vulnerability decisions, tabletop, document review, drone SORA, product applicability register, vulnerability management, zero trust assessment, CMMC base, Level 1 and Level 2 self-assessments; sixteen library skills) — every claim cited from officially published or licensed text via the Ansvar Gateway MCP connector (free plan available, business sign-up).

26 skills · 1 MCP server

Run CMMC Level 1 and Level 2 self-assessments under 32 CFR Part 170 with cited NIST SP 800-171 requirements and objectives, human-attested evidence, the engine's result and status, the POA&M Level 2 allows, SPRS inputs, and the affirmation or a reviewer sign-off. A self-assessment aid, not a C3PAO assessment or legal advice. Includes using-ansvar for cited legal and standards questions. Try: 'Using Ansvar, run a CMMC Level 1 self-assessment for our company.'

3 skills · 1 MCP server

Assess a vulnerability management programme and run a defensive vulnerability feed cycle with candidate findings, exposure questions, national advisories and one cursor across all feeds. Includes using-ansvar for cited legal and standards questions.

2 skills · 1 MCP server

Cross-installation agent federation with zero-trust security, PII-gated data flow, and compliance-grade audit trails

3 skills · 1 command · 1 agent

818 cybersecurity skills covering web security, pentesting, DFIR, threat intelligence, cloud security, malware analysis, and more. Mapped to 6 frameworks.

200 skills

USA Federal Civilian Overlay — 10 commands for FedRAMP, FISMA/NIST 800-53, CISA Zero Trust, OMB M-19-17 ICAM, NIST AI RMF, OMB M-25-21/M-25-22 AI assurance, E-Gov §208 PIA, EO 14028 SBOM

10 commands

Cloud and zero-trust agentic workflow marketplace for skills, agents, rules, MCP references, and compliance-aware architecture.

Expert TSA cybersecurity compliance advisor for critical infrastructure owners and operators. Use this skill whenever a user asks about TSA Security Directives for pipelines, freight railroads, passenger rail, public transit, or bus operators; the TSA Cyber Risk Management Program (CRMP); Cybersecurity Implementation Plan (CIP); Cybersecurity Operational Implementation Plan (COIP); Cybersecurity Assessment Plan (CAP); incident reporting to CISA; designation of a Cybersecurity Coordinator; Critical Cyber Systems (CCS); OT/IT network segmentation; the TSA November 2024 NPRM; or any directive in the SD Pipeline-2021 series, SD 1580-21-01 (freight rail), or SD 1582-21-01 (public transit/passenger rail).

200 skills

GRC connector wrapping networkbm/POAM-Automation-Tool: converts vulnerability scans into FedRAMP POA&M Excel and emits NIST-800-53-r5 (SI-2) findings → v1 finding contract.

1 skill · 3 commands