achieving-cmmc-level-2-compliance

achieving-cmmc-level-2-compliance is a Hardening & security compliance skill for AI agents, published by mukul975 in the Anthropic-Cybersecurity-Skills repository on GitHub. Skillspace rates achieving-cmmc-level-2-compliance C (72/100) and it passed the safety scan; a judge model has also reviewed it.

Prepare a defense-contractor environment for CMMC Level 2 certification: scope CUI and FCI, implement the 110 NIST SP 800-171 Rev 2 security requirements across 14 families, compute the SPRS score with the DoD Assessment Methodology, manage a compliant POA&M, and ready the organization for a C3PAO assessment. Use when an organization handles Controlled Unclassified Information (CUI) under a DoD contract, when a contract carries DFARS clause 252.204-7012/7019/7020/7021, when preparing for or responding to a CMMC assessment, when computing or improving an SPRS score, when building a System Security Plan or POA&M for 800-171, or when scoping which systems are in the CUI boundary. Keywords: CMMC, CMMC Level 2, NIST 800-171, SP 800-171 Rev 2, CUI, FCI, SPRS, DFARS 7012, C3PAO, POA&M, System Security Plan, DoD Assessment Methodology, 110 controls, defense industrial base, DIB, FedRAMP equivalency.

Grade
C
Quality
72 / 100
Safety
Passed
GitHub stars
32,716

Placed #5 of 6 in the judged category final for Hardening & security compliance.

This rating describes the version of the repository we crawled; it may have changed since, so go by its current files.

Our review

Architecture
84 / 100
Maturity
Packaged: licensed, with a version or references
Security scan
No issues found
License
Not declared. Check the repository before reusing it.

Judge review

Placed #5 of 6 in the judged category final for Hardening & security compliance.

  • Trigger3535
  • Instructions8585
  • Specificity9090
  • Safety7575
  • Disclosure5555
  • Maintenance4545
Deep, accurate regulatory playbook citing real DFARS clauses and SPRS scoring rules, badly hurt by an empty frontmatter description field that would cripple automatic discovery.

Not checked yet

  • Category is a classifier prediction; no model has read this skill yet
  • No blind task eval yet
  • Scope (portable / vendor / repo-internal) not assessed; only the top of each category is read for scope
  • Sibling files (scripts, references) not fetched; security scan covers SKILL.md only

Skillspace indexes and rates this skill; it does not host or endorse it. Run third-party skills at your own risk.