claude

cmmc-readiness

Get a defense supplier ready for a CMMC 2.0 Level 2 assessment. Three deterministic stdlib scripts: an SPRS scorer that weights all 110 NIST SP 800-171 Rev 2 requirements per 32 CFR 170.24 and blocks gaps that can never go on a POA&M; a POA&M closeout tracker that checks every deferred gap against the 180-day Conditional status deadline and the annual affirmation calendar; and a scope classifier that sorts the asset inventory into the 170.19 categories and blocks on assets missing from the SSP or cloud providers holding CUI without FedRAMP. Ships cs-cmmc-assessor agent, /cs-cmmc-readiness and /cs-sprs-score commands, 3 cited references and a readiness sign-off.

29,725 on GitHubby Alireza Rezvaniv2.14.5MITupdated yesterdaycompliance
/

Plugin cmmc-readiness from marketplace claude-code-skills in alirezarezvani/claude-skills. Commands read from the repo's manifest — today.

What it installs

Skills (1)

  • cmmc-readiness

    Use when a defense contractor or subcontractor is preparing for a CMMC 2.0 Level 2 self-assessment or C3PAO assessment, calculating or checking an SPRS score against NIST SP 800-171 Rev 2, deciding what can go on a POA&M, tracking POA&M closeout before Conditional status expires, or scoping assets,

Slash commands (2)

  • /cmmc-readiness:cs-cmmc-readiness

    Full CMMC Level 2 readiness pass - classify the asset inventory, score all 110 requirements, and check the POA&M against the 180-day closeout deadline.

  • /cmmc-readiness:cs-sprs-score

    Score a NIST SP 800-171 Rev 2 self-assessment for SPRS and CMMC Level 2, and list what must be fixed before Conditional status is possible.

Subagents (1)

  • cs-cmmc-assessor

    Use when a defense contractor is preparing for a CMMC 2.0 Level 2 self-assessment or C3PAO assessment, checking an SPRS score, deciding what can go on a POA&M, racing a POA&M closeout deadline, or scoping an enclave and cloud providers that hold CUI. Scores the 110 NIST SP 800-171 Rev 2 requirements

View source on GitHub alirezarezvani.medium.com

More from alirezarezvani/claude-skills

All 113 plugins →

45 advanced engineering skills: agent designer, agent workflow designer, RAG architect, database designer + schema designer + SQL assistant, migration architect, observability designer, dependency auditor, changelog generator, API design reviewer, API test suite builder, CI/CD pipeline builder, MCP server builder, skill security auditor, skill tester, performance profiler, focused-fix, browser-automation, full-page-screenshot, git-worktree-manager, monorepo-navigator, codebase-onboarding, interview-system-designer, runbook-generator, spec-driven-workflow, secrets-vault-manager, env-secrets-manager, pr-review-expert, self-eval, tc-tracker, feature-flags-architect, kubernetes-operator, chaos-engineering, ship-gate, slo-architect (error-budget + multi-window burn-rate alerts per Google SRE Workbook), tech-debt-tracker, agent-regression-evals, coding-agent-rollout, commit-craft, agent-run-forensics and i18n-localization. Agent skill and plugin for Claude Code, Codex, Gemini CLI, Cursor, OpenClaw.

48 skills · hooks

29,725

47 marketing skills across 8 pods: Content, SEO & AEO, CRO, Channels, Growth, Intelligence, Sales enablement, and X/Twitter growth. 62 Python tools, 89 reference docs.

47 skills · hooks

29,725

32 engineering skills: architecture, frontend, backend, fullstack, QA, DevOps, security, AI/ML, data engineering, Playwright (9 sub-skills), self-improving agent, Stripe integration, TDD guide, tech stack evaluator, Google Workspace CLI, a11y audit (WCAG 2.2), Azure cloud architect, GCP cloud architect, security pen testing, Snowflake development, adversarial-reviewer, ai-security, cloud-security, incident-response, red-team, threat-detection. v2.8.1 audits senior-fullstack / senior-frontend / senior-backend against karpathy-coder + Matt Pocock — each ships a 7-question forcing-question library, 4 customization profiles (JSON), deterministic decision engine, composition map into POWERFUL specialists, plus cs-fullstack-engineer / cs-frontend-engineer / cs-backend-engineer orchestrator agents (context: fork) + /cs-fullstack-review, /cs-frontend-review, /cs-backend-review, /cs-engineer-grill slash commands.

35 skills · hooks

29,725

Founder-mode executive team plugin: 13 cs-* C-suite agents (CFO, CMO, CRO, CPO, COO, CHRO, CISO, Chief of Staff, General Counsel, Chief Data Officer, Chief AI Officer, Chief Customer Officer, VP of Engineering) with distinct cognitive voices, plus 21 /c-level-agents:* slash commands — forcing-question office hours (CFO/CMO/CPO/CRO/CTO/CISO/GC/CDO/CAIO/CCO/VPE reviews), strategic sprint pipeline (brief → boardroom → decide → execute → post-mortem), and meta routing (/c-level-agents:founder-mode auto-router, /cs-onboard, /c-level-agents:cross-eval multi-model consensus, /c-level-agents:freeze cooldown lock). Wraps the 33 c-level skills with cognitive gearing, persona voice, and artifact-driven handoffs. The business-domain answer to YC Garry Tan's gstack.

22 skills · 13 agents

29,725

33 C-level advisory skills (install the separate companion c-level-agents plugin for the persona layer): virtual board of directors (CEO, CTO, COO, CPO, CMO, CFO, CRO, CISO, CHRO) plus General Counsel, CDO, CAIO, CCO, and VP of Engineering (DORA delivery throughput analyzer, engineering hiring funnel calculator with conversion + pipeline gap, eng team structure designer with squad/tribe + manager-trigger), executive mentor, founder coach, orchestration (Chief of Staff, board meetings, decision logger), strategic capabilities (board deck builder, scenario war room, competitive intel, M&A playbook), culture frameworks. The 13 cs-* persona agents + 21 /c-level-agents:* slash commands (founder-mode router, office-hours intake, multi-role boardroom, strategic sprint pipeline, cross-model consensus, cooldown freeze) ship in the companion c-level-agents plugin.

34 skills · hooks

29,725

14 regulatory affairs & quality management skills for HealthTech/MedTech: ISO 13485 QMS, MDR 2017/745, FDA 510(k)/PMA, GDPR/DSGVO, ISO 27001 ISMS, CAPA management, risk management, clinical evaluation, SOC 2 compliance.

21 skills

29,725

Similar plugins

ruflo-adr

claudecodex

ADR lifecycle management — create, index, supersede, and link Architecture Decision Records to code

5 skills · 1 command · 1 agent

ruvnet/ruflo 81,589

Install the "AAS Privacy & Compliance Engineering" workflow plugin from Agentic Awesome Skills.

6 skills

sickn33/agentic-awesome-skills 49,620

Automate API security directly in Claude Code with 42Crunch - automatically audit OpenAPI specs, detect vulnerabilities aligned with OWASP API Security risks (including BOLA/BFLA), and apply AI-powered fixes. Designed for AI-assisted development workflows, it provides continuous guardrails through an audit->scan->remediate->validate loop, ensuring APIs meet enterprise security standards before deployment.

5 skills

anthropics/claude-plugins-official 47,076

SAST analysis, dependency vulnerability scanning, OWASP Top 10 compliance, container security scanning, and automated security hardening

5 skills · 3 commands · 2 agents

wshobson/agents 42,461

Twilio Skills provide procedural knowledge for AI coding agents — which APIs to use, in what order, and what to avoid. Covers SMS, Voice, WhatsApp, Verify, SendGrid, Compliance, and 30+ products.

57 skills · 1 MCP server

anthropics/knowledge-work-plugins 35,601

Testing, security, and code quality experts - code review, penetration testing, QA automation

VoltAgent/awesome-claude-code-subagents 26,513

Maintain cmmc-readiness?

This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.

claude & codex plugins113 plugins