v0.7.0 — April 28, 2026
🆕 New Skills (3)
-
Australian Information Security Manual (ISM) — Expert advisor for the ASD ISM; covers control applicability markings (NC/OS/PROTECTED), system authorisation and IRAP assessment preparation, Essential Eight Maturity Level mapping to ISM chapters, Chapter 13 system hardening, supply chain obligations for private sector cloud providers, and government-specific gaps not covered by ISO 27001 certification.
-
EU NIS2 Directive — Expert advisor for Directive (EU) 2022/2555; covers Essential vs Important Entity classification (Annex I/II), all 10 Art. 21 security measures, Art. 23 incident reporting timelines (24h/72h/1 month), Art. 20 management body accountability, supply chain security under Art. 21(2)(d) and Art. 26 ENISA assessments, ISO 27001 gap analysis, and DORA lex specialis interaction for financial entities.
-
CCPA/CPRA California Privacy — Expert advisor for CCPA and CPRA/Proposition 24; covers business threshold analysis, all 7 consumer rights with deadlines (45-day standard, 15 business days for SPI), Sensitive Personal Information (SPI) classification and limitation mechanisms, Do Not Sell or Share link, Global Privacy Control (GPC) signal obligations, ad tech sale vs. sharing classification, service provider/contractor/third-party classification, CPPA enforcement and penalty exposure ($2,500/$7,500 per violation), and GDPR-to-CCPA/CPRA gap analysis.
📊 Eval Suite Expansion
- Expanded from 75 → 90 test cases and 375 → 450 assertions — 5 ISM evals (control scoping and authorisation, IRAP preparation, Chapter 13 hardening, Essential Eight mapping, supply chain obligations), 5 NIS2 evals (entity classification, Art. 21 obligations, Art. 23 reporting, ISO 27001 gap, DORA interaction), and 5 CCPA/CPRA evals (threshold analysis, right-to-know/delete workflow, ad tech classification, GDPR gap analysis, SPI classification).
- Updated benchmark: 95% with-skill (428/450) / 80% baseline (362/450) / +66 additional assertions passing.
🌐 GitHub Pages Improvements
- Header updated — title changed to "Claude Skills for Governance, Risk, & Compliance Frameworks"; skills grid fixed to 6 columns for even rows (18 items ÷ 6 = 3 equal rows).
- CCPA/CPRA now uses the actual California state flag SVG (Wikimedia Commons) instead of the unreliable subdivision tag emoji.