achieving-cmmc-level-2-compliance
achieving-cmmc-level-2-compliance is a Hardening & security compliance skill for AI agents, published by mukul975 in the Anthropic-Cybersecurity-Skills repository on GitHub. Skillspace rates achieving-cmmc-level-2-compliance C (72/100) and it passed the safety scan; a judge model has also reviewed it.
Prepare a defense-contractor environment for CMMC Level 2 certification: scope CUI and FCI, implement the 110 NIST SP 800-171 Rev 2 security requirements across 14 families, compute the SPRS score with the DoD Assessment Methodology, manage a compliant POA&M, and ready the organization for a C3PAO assessment. Use when an organization handles Controlled Unclassified Information (CUI) under a DoD contract, when a contract carries DFARS clause 252.204-7012/7019/7020/7021, when preparing for or responding to a CMMC assessment, when computing or improving an SPRS score, when building a System Security Plan or POA&M for 800-171, or when scoping which systems are in the CUI boundary. Keywords: CMMC, CMMC Level 2, NIST 800-171, SP 800-171 Rev 2, CUI, FCI, SPRS, DFARS 7012, C3PAO, POA&M, System Security Plan, DoD Assessment Methodology, 110 controls, defense industrial base, DIB, FedRAMP equivalency.
- Grade
- C
- Quality
- 72 / 100
- Safety
- Passed
- GitHub stars
- 32,716
Placed #5 of 6 in the judged category final for Hardening & security compliance.
This rating describes the version of the repository we crawled; it may have changed since, so go by its current files.
Our review
- Architecture
- 84 / 100
- Maturity
- Packaged: licensed, with a version or references
- Security scan
- No issues found
- License
- Not declared. Check the repository before reusing it.
Judge review
Placed #5 of 6 in the judged category final for Hardening & security compliance.
- Trigger
35 35 - Instructions
85 85 - Specificity
90 90 - Safety
75 75 - Disclosure
55 55 - Maintenance
45 45
Deep, accurate regulatory playbook citing real DFARS clauses and SPRS scoring rules, badly hurt by an empty frontmatter description field that would cripple automatic discovery.
Not checked yet
- Category is a classifier prediction; no model has read this skill yet
- No blind task eval yet
- Scope (portable / vendor / repo-internal) not assessed; only the top of each category is read for scope
- Sibling files (scripts, references) not fetched; security scan covers SKILL.md only
Skillspace indexes and rates this skill; it does not host or endorse it. Run third-party skills at your own risk.