If you're shipping hardware or software into the EU and it connects to a network, you need to know about the Cyber Resilience Act, and this skill walks you through the compliance maze. It helps you figure out if your product is a PDE, whether it's Default, Class I, or Class II (which determines if you need a notified body), and what you actually have to do for conformity assessment and CE marking. The gap analysis workflow against Annex I requirements is solid, covering everything from secure-by-default configs to the 24-hour vulnerability reporting obligations to ENISA. The regulation goes into full effect December 2027, so if you're a manufacturer, importer, or distributor, you've got time to get your SBOM and vulnerability handling processes sorted.
- skills.sh installs
- 255
- GitHub stars
- 1.1K
- last updated
- Jun 11, 2026
Install
$ npx -y skills add sushegaad/claude-skills-governance-risk-and-compliance --skill eu-cra --agent claude-codeInstalls into .claude/skills of the current project.
Files
EU Cyber Resilience Act (CRA) Skill
Last verified: 2026-09-14
Overview
You are an expert advisor on Regulation (EU) 2024/2847 — the EU Cyber Resilience Act (CRA), published in the Official Journal on 20 November 2024. The CRA entered into force on 10 December 2024 and applies in a staggered timeline:
| Milestone | Date |
|---|---|
| Entry into force | 10 December 2024 |
| Vulnerability & incident reporting obligations | 11 September 2026 — NOW IN FORCE |
| Notified body obligations | 11 December 2026 |
| Full application (all obligations) | 11 December 2027 |
The CRA applies to all Products with Digital Elements (PDEs) — any hardware or software with network connectivity — sold or made available in the EU. It covers manufacturers, importers, and distributors in the supply chain.
Sponsors
Agent CaffeineSponsoredClose your lid, come back to finished work
SnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthly
WaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthly
knobsSponsoredSee your site on any phone, any day, in any languageDetails
- Repository
- github.com/sushegaad/claude-skills-governance-risk-and-compliance
- Categories
- Security, DevOps & CI/CD
- License
- MIT
- First seen
- Jun 11, 2026
More from sushegaad/claude-skills-governance-risk-and-compliance
All 30Recommended
More Security
payload-cmsconnorads/dotfilesUse when working with Payload CMS projects (payload.config.ts, collections, fields, hooks, access control, Payload API). Triggers on tasks involving: collection240skills.sh installs
hipaa-compliance-guardjorgealves/agent_skillsAudits HealthTech applications for HIPAA technical safeguards like encryption and audit logging. Use when reviewing healthcare infrastructure or ensuring PHI is238skills.sh installs
hugging-face-jobshuggingface/skillsThis skill should be used when users want to run any workload on Hugging Face Jobs infrastructure. Covers UV scripts, Docker-based jobs, hardware selection, cos233skills.sh installs
zz-code-reconsendaifun/skillsDeep architectural context building for security audits. Use when conducting security reviews, building codebase understanding, mapping trust boundaries, or pre233skills.sh installs
hubspot-integrationdavila7/claude-code-templatesExpert patterns for HubSpot CRM integration including OAuth authentication, CRM objects, associations, batch operations, webhooks, and custom objects. Covers No212skills.sh installs
kali-docker-pentestingkroegha/kali-docker-pentestingComprehensive pentesting toolkit using Kali Linux Docker container. Provides direct access to 200+ security tools without MCP overhead. Use when conducting secu209skills.sh installs