SKILLEMALL.ai
GitHub ↗ RU Sign in

AC nis2-navigator

NIS2 Compliance Navigator — scope classification, Art. 21 gap analysis (0-4 maturity scoring), and compliance roadmap under EU Directive 2022/2555 with deep German BSIG-neu coverage and profiles for Italy, France, Netherlands, Austria, Spain. Use when: (1) User mentions "NIS2", "NIS-2", "BSIG", "BSIG-neu", "NIS2UmsuCG", "Cyberbeveiligingswet", "Loi Résilience", "NISG", "decreto legislativo 138", (2) User asks if their organization falls under NIS2 or needs a cybersecurity compliance assessment, (3) User mentions essential/important entities, Annex I/II, BSI registration, § 30 BSIG, incident reporting, management body liability, supply chain security, (4) User wants a NIS2 gap analysis, readiness assessment, or compliance roadmap, (5) User asks about NIS2 fines, enforcement, or Nachweispflicht, (6) User asks about NIS2 in any EU Member State.

lawve-ai/awesome-legal-skills Agent Skills author: lawve-ai 10 files body ≈ 3 335 tokens Open the sourcegithub.com↗ analyzed 62 min ago

NIS2 Compliance Navigator — scope classification, Art.

As a process C 56/100 · Has gaps — weak spots: inputs and preconditions, consistency, running it twice

AnalyzerSecurityOperations and projectstype and topics are labelled automatically from the skill text
Runs in: Claude / Claude Code ChatGPT / Codex Gemini CLI Cursor GitHub Copilot / VS Code Qwen Code Kimi Code CLI Z.ai (GLM) DeepSeek (Deep Code) Mistral Vibe LangChain (deepagents) OpenClaw Goose OpenCode
JSON
Technical rating
A
96/100
safety, quality, tests
Safety 60%
98
Quality 40%
94
Run on models
none yet
Process rating
C
56/100
Has gaps
Inputs and preconditions w 11
0
Progress reporting w 2
0
Running it twice w 4
30
the three weakest of ten parameters · all ten

How to improve

    For the model run — optional
    • A spec.yaml with trigger phrases and assertions — a behaviour contract for CI; `skilltest init` writes a template.

    Guard findings · 2

    ✓ No critical or high findings

    Medium and low: 2
    • low Risky intent intent-offensive-security references/art21-measures.md:136
      Offensive-security / dual-use content (legitimate for authorised testing; review intended use)
      - 4: Continuous assessment program (red team, bug bounty, automated security testing), KPIs tracked, board-level reporting on IS effectiveness
    • low Risky intent intent-offensive-security references/germany-nis2umsucg.md:214
      Offensive-security / dual-use content (legitimate for authorised testing; review intended use)
      - **Enhanced ransomware reporting**: Specific data points (attack vector, ransom demands, payments) reportable to authorities

    Files scanned: 10. Evidence is masked. Grey chips explain why severity was lowered.

    Against the Agent Skills spec

    ✓ No remarks against the Agent Skills spec

    Process rating: all ten parameters 56/100

    • 0Inputs and preconditions. Does not say what the process needs to start
    • 0Progress reporting. Says nothing while it works
    • 30Running it twice. 2 mutating operations with no state check
    • 40Consistency. Frontmatter name (nis2-navigator) differs from the folder (nis2-navigator-oliver-schmidt-prietz)
    • 50When it triggers. No condition that starts the skill
    • 55Failures and branches. 1 branches
    • 60Tools and files. Uses tools (web) that frontmatter does not declare
    • 60Result and completion. Output format stated, no completion criterion
    • 100Steps. 35 steps
    • 100Execution cost. Instruction body is 3335 tokens
    • medium 4 test cases, all positive: not one "should refuse" or "should ask first"
    • low No test case covers injection arriving through data

    Everything here is measured from the skill text rather than judged by a model, so the numbers are checkable. A parameter weighs more when it is a more common reason for the process to stall.

    Quality signals

    • +4Description does not say when NOT to use the skill (false activations)
    • +3Description length 853: 120–800 characters recommended
    • +2Single-language instructions
    • +5Description quotes 5 example trigger phrases
    • +4Structure: 21 headings
    • +3Step-by-step instructions: 35 items
    • +3Output format is stated explicitly
    • +4Has examples (2 code blocks)
    • +4Reference files are cited in the instructions (6 of 6)
    • +1License stated

    Quality base 70; lint remarks subtract, signals add up to 100. Result: 94.