v1.1.0 — 22 May 2026
New Skills (3)
-
🇳🇿 NZISM (skill #28) — New Zealand Information Security Manual advisor for NZ government agencies and their supply chains. Covers the NZ Government Information Classification System (Unclassified → Top Secret), all 18+ NZISM control sections, Certification & Accreditation (C&A) lifecycle for Restricted and above, SSP/POA&M preparation, third-party and cloud supplier obligations, and NCSC NZ/GCSB compliance.
-
🇻🇳 VN-PDPL (skill #29) — Vietnam Personal Data Protection Law (Law No. 91/2025/QH15, effective 1 January 2026) and Decree 356/2025/ND-CP advisor. Covers all 6 data subject rights, basic vs. sensitive data categories (including 13 sensitive categories), cross-border transfer impact assessments (Article 20, 60-day submission), domestic DPIAs (Article 21), 72-hour breach notification to Ministry of Public Security, sector-specific rules for finance, AI, cloud, and blockchain, SME exemptions, and DPO qualification requirements.
-
🇪🇺 EU CRA (skill #30) — EU Cyber Resilience Act (Regulation (EU) 2024/2847) advisor for all Products with Digital Elements (PDEs). Covers Default/Class I (35 categories, Annex III)/Class II (12 categories, Annex IV) product classification, Annex I Part I (10 security properties) and Part II (9 vulnerability handling obligations), CE marking, technical documentation (Annex VII), SBOM programme (SPDX/CycloneDX), 24-hour ENISA early warning and 72-hour full report obligations, 5-year support period requirements, and manufacturer/importer/distributor duties.
Skill Evaluation
- Benchmarks run for all 3 new skills (15 test cases, 75 assertions): NZISM 100% / 88% baseline (+12%), VN-PDPL 100% / 68% baseline (+32%), EU CRA 100% / 80% baseline (+20%)
- Eval results page (
grc-skills-eval-results.html) updated with full skill sections for skills 28–30 — prompts, response summaries, and per-assertion pass/fail grading - Overall eval suite now covers 30 skills / 150 test cases / 675 assertions: 96% with-skill, 81% baseline, +104 additional assertions passing with skills installed.