If you're a defense contractor dealing with CMMC 2.0 compliance, this walks you through gap assessments, SSP drafting, POA&M creation, and SPRS score calculations with the specificity you actually need. It knows the difference between Level 1's 17 practices and Level 2's full 110 NIST SP 800-171 requirements, understands DFARS clauses 7012/7019/7020/7021, and will output structured tables for gap analysis or remediation plans instead of vague advice. The skill flags common failures like missing FIPS validation or MFA gaps on practice IA.L2-3.5.3. Honestly most valuable if you're mid-assessment and need to document controls correctly or calculate what your SPRS score hit will be from specific gaps.
- skills.sh installs
- 268
- GitHub stars
- 1.1K
- last updated
- Jun 11, 2026
Install
$ npx -y skills add sushegaad/claude-skills-governance-risk-and-compliance --skill cmmc --agent claude-codeInstalls into .claude/skills of the current project.
Files
CMMC 2.0 Compliance Skill
Last verified: 2026-09-14
⚠️ Program status (July 13, 2026): DoD suspended CMMC Phase 2 — including the C3PAO third-party assessment requirements due in new contracts from November 10, 2026 — via two policy memoranda (DoW CIO; USD(A&S)), placing pending CMMC milestones in abeyance pending a 60-day CMMC Reform Task Force review (report due ≈ September 13, 2026). What still stands: 32 CFR Part 170 and DFARS 252.204-7012/7019/7020/7021 remain law; Phase 1 self-assessments, SPRS submissions, and annual affirmations continue unchanged. Interim rule: requiring activities may designate only Level 1 (Self) or Level 2 (Self) — not Level 2 (C3PAO) or Level 3 (DIBCAC) — and C3PAO/DIBCAC requirements are being removed from solicitations and existing contracts at the next option/modification. Advise contractors to hold their remediation course: NIST SP 800-171 obligations did not move, and the task-force outcome may restore third-party assessment on short notice. Re-verify this status after mid-September 2026.
Sponsors
Agent CaffeineSponsoredClose your lid, come back to finished work
SnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthly
WaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthly
knobsSponsoredSee your site on any phone, any day, in any languageDetails
- Repository
- github.com/sushegaad/claude-skills-governance-risk-and-compliance
- License
- MIT
- First seen
- Jun 11, 2026
More from sushegaad/claude-skills-governance-risk-and-compliance
All 30Recommended
cavemanjuliusbrussee/cavemanUltra-compressed communication mode. Cuts output tokens 65% (measured) by speaking like caveman while keeping full technical accuracy. Supports intensity levels618.3Kskills.sh installs
improveshadcn/improveSurvey any codebase as a senior advisor and produce prioritized, self-contained implementation plans for OTHER models/agents to execute. Strictly read-only on s40Kskills.sh installs
systematic-debuggingobra/superpowersUse when encountering any bug, test failure, or unexpected behavior, before proposing fixes326.7Kskills.sh installs
karpathy-guidelinesforrestchang/andrej-karpathy-skillsBehavioral guidelines to reduce common LLM coding mistakes through explicit assumptions, simplicity, and verifiable success criteria.17.9Kskills.sh installs
find-skillsvercel-labs/skillsHelps users discover and install agent skills when they ask questions like "how do I do X", "find a skill for X", "is there a skill that can...", or express int4.3Mskills.sh installs