Claude-Skills-Governance-Risk-and-Compliance MCP — Casos de uso, Instalar & Demo ao vivo

Por que usar

Principais recursos

9 frameworks: ISO 27001, SOC 2, FedRAMP, GDPR, HIPAA, NIST CSF 2.0, PCI DSS v4.0.1, TSA Cybersecurity, ISO 42001
Each skill ships gap-assessment structure, policy templates, control-implementation guide, evidence checklists
Regulatory citations in policy templates, not invented references
94% eval pass rate vs 72% baseline Claude across 18 test cases
Distributable as .skill files or via Claude Code marketplace

Demo ao vivo

Como fica na prática

claude-skills-governance-risk-and-compliance-skill.replay ▶ pronto

0/0

Instalar

Escolha seu cliente

~/Library/Application Support/Claude/claude_desktop_config.json · Windows: %APPDATA%\Claude\claude_desktop_config.json

{
  "mcpServers": {
    "claude-skills-governance-risk-and-compliance-skill": {
      "command": "git",
      "args": [
        "clone",
        "https://github.com/Sushegaad/Claude-Skills-Governance-Risk-and-Compliance",
        "~/.claude/skills/Claude-Skills-Governance-Risk-and-Compliance"
      ],
      "_inferred": true
    }
  }
}

Abra Claude Desktop → Settings → Developer → Edit Config. Reinicie após salvar.

~/.cursor/mcp.json · .cursor/mcp.json

{
  "mcpServers": {
    "claude-skills-governance-risk-and-compliance-skill": {
      "command": "git",
      "args": [
        "clone",
        "https://github.com/Sushegaad/Claude-Skills-Governance-Risk-and-Compliance",
        "~/.claude/skills/Claude-Skills-Governance-Risk-and-Compliance"
      ],
      "_inferred": true
    }
  }
}

Cursor usa o mesmo esquema mcpServers que o Claude Desktop. Config de projeto vence a global.

VS Code → Cline → MCP Servers → Edit

{
  "mcpServers": {
    "claude-skills-governance-risk-and-compliance-skill": {
      "command": "git",
      "args": [
        "clone",
        "https://github.com/Sushegaad/Claude-Skills-Governance-Risk-and-Compliance",
        "~/.claude/skills/Claude-Skills-Governance-Risk-and-Compliance"
      ],
      "_inferred": true
    }
  }
}

Clique no ícone MCP Servers na barra lateral do Cline, depois "Edit Configuration".

~/.codeium/windsurf/mcp_config.json

{
  "mcpServers": {
    "claude-skills-governance-risk-and-compliance-skill": {
      "command": "git",
      "args": [
        "clone",
        "https://github.com/Sushegaad/Claude-Skills-Governance-Risk-and-Compliance",
        "~/.claude/skills/Claude-Skills-Governance-Risk-and-Compliance"
      ],
      "_inferred": true
    }
  }
}

Mesmo formato do Claude Desktop. Reinicie o Windsurf para aplicar.

~/.continue/config.json

{
  "mcpServers": [
    {
      "name": "claude-skills-governance-risk-and-compliance-skill",
      "command": "git",
      "args": [
        "clone",
        "https://github.com/Sushegaad/Claude-Skills-Governance-Risk-and-Compliance",
        "~/.claude/skills/Claude-Skills-Governance-Risk-and-Compliance"
      ]
    }
  ]
}

O Continue usa um array de objetos de servidor em vez de um map.

~/.config/zed/settings.json

{
  "context_servers": {
    "claude-skills-governance-risk-and-compliance-skill": {
      "command": {
        "path": "git",
        "args": [
          "clone",
          "https://github.com/Sushegaad/Claude-Skills-Governance-Risk-and-Compliance",
          "~/.claude/skills/Claude-Skills-Governance-Risk-and-Compliance"
        ]
      }
    }
  }
}

Adicione em context_servers. Zed recarrega automaticamente ao salvar.

claude mcp add claude-skills-governance-risk-and-compliance-skill -- git clone https://github.com/Sushegaad/Claude-Skills-Governance-Risk-and-Compliance ~/.claude/skills/Claude-Skills-Governance-Risk-and-Compliance

Uma linha só. Verifique com claude mcp list. Remova com claude mcp remove.

Casos de uso

Usos do mundo real: Claude-Skills-Governance-Risk-and-Compliance

Run a SOC 2 readiness assessment for a SaaS startup

👤 Founders and early-stage CTOs preparing for SOC 2 Type I ⏱ ~90 min advanced

Quando usar: Enterprise customers are asking for SOC 2 and you need to know how far off you are.

Fluxo

Run the gap assessment

Use the SOC 2 skill. Assess our readiness across CC, A, C, PI, P — here's our current security setup [paste].✓ Copiado

→ Per-criterion gap list with severity
Generate policy templates

Give me policy templates for the top 5 gaps, with specific controls and citations.✓ Copiado

→ Policies with CC/A/C/PI/P references
Evidence checklist

What evidence do we need to collect before the audit?✓ Copiado

→ Ordered checklist with collection owners

Resultado: A clear path to SOC 2 Type I with sample policies.

Armadilhas

Treating skill output as a final audit deliverable — Always pair with a human auditor; this skill accelerates prep, it doesn't replace attestation

Map engineering controls to HIPAA Security Rule

👤 Healthcare-facing engineering teams ⏱ ~60 min advanced

Quando usar: You're building a PHI-handling service and need to map each HIPAA safeguard.

Fluxo

Current controls inventory

Use the HIPAA skill. Here's our tech stack and current controls [paste]. Map to Security Rule administrative, physical, technical safeguards.✓ Copiado

→ Safeguard-by-safeguard mapping with gaps flagged
Breach-Notification-readiness plan

What do we need for a compliant breach-notification workflow?✓ Copiado

→ Runbook with timelines and responsible roles

Resultado: A HIPAA control matrix plus breach-readiness runbook.

Armadilhas

Assuming BAA = full compliance — Skill distinguishes BAA scope from the broader Security Rule

Combinações

Combine com outros MCPs para 10× de alavancagem

claude-skills-governance-risk-and-compliance-skill + terraform-skill

Generate IaC controls that implement the policy

For the access-control policy from SOC 2 skill, write Terraform modules that enforce it in AWS.✓ Copiado

claude-skills-governance-risk-and-compliance-skill + aws-agent-skill

Map HIPAA technical safeguards to specific AWS services

For each HIPAA Security Rule technical safeguard, show the AWS services that implement it.✓ Copiado

Ferramentas

O que este MCP expõe

Ferramenta	Entradas	Quando chamar
Gap assessment	current posture + framework	Start of any compliance program
Policy template generation	gap + framework	Closing a gap
Control implementation guide	control ID	Engineering a specific control
Evidence checklist	framework + scope	Audit preparation

Custo e limites

O que custa rodar

Cota de API: None
Tokens por chamada: 10-30k per framework engagement — heavy
Monetário: Free — skill is local
Dica: Scope to one framework at a time; cross-framework work balloons context.

Segurança

Permissões, segredos, alcance

Armazenamento de credenciais: No credentials — skill is prompts

Saída de dados: None from the skill itself

Skill output is decision-support, not a substitute for qualified auditors, legal counsel, or DPOs. Treat drafts as starting points.

Solução de problemas

Erros comuns e correções

Skill cites an outdated control version

Specify the framework version explicitly (e.g. 'ISO 27001:2022' not just 'ISO 27001').

Policy template is too generic

Provide your specific tech stack and jurisdiction so the skill can tailor.

Alternativas

Claude-Skills-Governance-Risk-and-Compliance vs. outros

Alternativa	Quando usar	Troca
GRC platforms (Vanta, Drata, Secureframe)	You want automated evidence collection and continuous monitoring	Paid services; this skill is for guidance, not automation
Legal counsel	You need binding legal advice	This skill can't replace a lawyer — it informs and accelerates, not decides

Mais

Recursos

📖 Leia o README oficial no GitHub

🐙 Ver issues abertas

🔍 Ver todos os 400+ servidores MCP e Skills