Skill · em Proteger

cra-vulnerability-obligations

Use when a user asks what the EU Cyber Resilience Act (CRA) means for their product, whether and when they must report a vulnerability or incident, or what a specific CVE triggers legally. Maps a product with digital elements to CRA scope, product classification, Annex I vulnerability-handling…

Procedência

Antes de instalar

1 arquivo · 17,7 KB · só texto, nenhum script

Instalar na sua CLI

O comando baixa a versão fixada (commit 57f899e) direto da origem, para a pasta que a CLI lê. Precisa de curl (macOS e Linux); no Windows não há comando, porque o Rook Labs é para macOS.

Claude Code

Neste projeto: instala em .claude/skills/cra-vulnerability-obligations/.

d=".claude/skills/cra-vulnerability-obligations"
u="https://raw.githubusercontent.com/davila7/claude-code-templates/57f899e5394bb8ca166f38eacae8f0853cbfe033/cli-tool/components/skills/security/cra-vulnerability-obligations"
curl -fsSL --create-dirs \
  -o "$d/SKILL.md" "$u/SKILL.md"

Global: instala em ~/.claude/skills/cra-vulnerability-obligations/.

d="$HOME/.claude/skills/cra-vulnerability-obligations"
u="https://raw.githubusercontent.com/davila7/claude-code-templates/57f899e5394bb8ca166f38eacae8f0853cbfe033/cli-tool/components/skills/security/cra-vulnerability-obligations"
curl -fsSL --create-dirs \
  -o "$d/SKILL.md" "$u/SKILL.md"

Codex

Neste projeto: instala em .agents/skills/cra-vulnerability-obligations/.

d=".agents/skills/cra-vulnerability-obligations"
u="https://raw.githubusercontent.com/davila7/claude-code-templates/57f899e5394bb8ca166f38eacae8f0853cbfe033/cli-tool/components/skills/security/cra-vulnerability-obligations"
curl -fsSL --create-dirs \
  -o "$d/SKILL.md" "$u/SKILL.md"

Global: instala em ~/.agents/skills/cra-vulnerability-obligations/.

d="$HOME/.agents/skills/cra-vulnerability-obligations"
u="https://raw.githubusercontent.com/davila7/claude-code-templates/57f899e5394bb8ca166f38eacae8f0853cbfe033/cli-tool/components/skills/security/cra-vulnerability-obligations"
curl -fsSL --create-dirs \
  -o "$d/SKILL.md" "$u/SKILL.md"

Antigravity

Neste projeto: instala em .agents/skills/cra-vulnerability-obligations/.

d=".agents/skills/cra-vulnerability-obligations"
u="https://raw.githubusercontent.com/davila7/claude-code-templates/57f899e5394bb8ca166f38eacae8f0853cbfe033/cli-tool/components/skills/security/cra-vulnerability-obligations"
curl -fsSL --create-dirs \
  -o "$d/SKILL.md" "$u/SKILL.md"

Global: instala em ~/.gemini/antigravity-cli/skills/cra-vulnerability-obligations/.

d="$HOME/.gemini/antigravity-cli/skills/cra-vulnerability-obligations"
u="https://raw.githubusercontent.com/davila7/claude-code-templates/57f899e5394bb8ca166f38eacae8f0853cbfe033/cli-tool/components/skills/security/cra-vulnerability-obligations"
curl -fsSL --create-dirs \
  -o "$d/SKILL.md" "$u/SKILL.md"

Peça ao Rook

Já usa o Rook Labs? Cole no chat do Rook: instale a skill https://rooklabs.sh/marketplace/cct.cra-vulnerability-obligations

Prévia do SKILL.md

---
name: cra-vulnerability-obligations
description: >
  Use when a user asks what the EU Cyber Resilience Act (CRA) means for their
  product, whether and when they must report a vulnerability or incident, or
  what a specific CVE triggers legally. Maps a product with digital elements to
  CRA scope, product classification, Annex I vulnerability-handling duties, and
  Article 14 reporting obligations — every legal claim cited from official
  regulation text fetched live through the Ansvar Gateway MCP connector, joined
  with live CVE / CISA-KEV / EPSS vulnerability intelligence from the same
  connector.
license: CC-BY-4.0
metadata:
  author: Ansvar Systems AB
  connector: https://gateway.ansvar.eu/mcp
  version: "1.1"
---

# CRA Vulnerability & Reporting Obligations

Given a product and, optionally, a concrete vulnerability, produce a cited
obligations assessment under the EU Cyber Resilience Act (Regulation (EU)
2024/2847): whether the product is in scope, its classification, the standing
vulnerability-handling duties for the user's role, which reporting duties
fire and on what timeline, and which neighbouring regimes (NIS2, GDPR, DORA)
may be engaged at the entity level. Vulnerability facts (known exploitation,
exploit-prediction score, public exploits) come from live CVE intelligence.
Legal conclusions come only from fetched official text.

## Requirements

- The **Ansvar Gateway** MCP connector must be connected:
  `https://gateway.ansvar.eu/mcp` (OAuth 2.1 with Dynamic Client Registration;
  free plan signup at https://ansvar.eu). Works in Claude, ChatGPT, Copilot,
  and any MCP-capable agent.
- Tools this skill uses: `search`, `get_provision`, `get_cve_details`,
  `check_kev_status`, `get_epss_score`, `search_cve`, `get_exploits`,
  `get_my_capabilities`. All of them are available on every plan, including
  Free (Free has lower quotas and scopes each search to one jurisdiction or
  framework per call).
…

Ver todo o marketplace