01Score 8.8
Questionnaire fournisseur
Pre-fills a security questionnaire from your policies, tagging each answer Sourced, Inferred or To complete.
You review 150 answers instead of writing them; nothing invented gets through.
Verified skills
5 Claude skills for a CIO / CISO
Not prompts. SKILL.md files you install once, with precautions on the data never to paste in. Free, no sign-up.
Download all five (sources, zip)What none of these skills receives
- IP addresses, server names, network ranges, architecture diagrams
- Secrets, keys, configuration excerpts
- Named open vulnerabilities, detailed ongoing incidents
- Names of people other than meeting participants
Each skill reminds you before processing and stops if it finds any. Each output marks what is sourced, inferred or to be confirmed.
02Score 8.3
Revue de PSSI
Reviews a security policy and lists the gaps against ISO 27001:2022, with corrected wording.
The first pass before a mock audit: it finds the holes, you keep the decision.
03Score 8.3
Veille CVE ciblée
Filters vulnerability bulletins against your actual estate and sorts them into 72 h, 30 days, to plan.
Goes from 47 bulletins read to the 4 that concern you, with the source of every line.
04Score 8.3
Cartographie AI Act
Sorts your AI use cases by AI Act risk level, with role, obligations, deadlines and points to confirm.
The register the AI Act asks you for, with the article cited on every line so counsel can check fast.
05Score 8.0
Compte-rendu de comité sécurité
Turns raw committee notes into decisions, dated actions with owners, open risks and deferred items.
Someone who missed the meeting reads it in three minutes and knows who does what by when.
Installation
- Claude.ai: open the .skill file in a conversation, or Settings › Capabilities › Skills › Import.
- Claude Code: unzip and copy the folder into ~/.claude/skills/ (personal) or .claude/skills/ in the project (shared).
- Other editors: SKILL.md is plain Markdown, paste it into the project instructions.
These skills are a starting point for the CISO, never a final deliverable: review, correct, validate.