arckit-eu-cra

Assess EU Cyber Resilience Act compliance for digital products.

Updated Jul 24, 2026
One-click install
npx skills add https://github.com/tractorjuice/arckit-kimi --skill arckit-eu-cra
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: arckit-eu-cra
Source: https://github.com/tractorjuice/arckit-kimi/tree/main/skills/arckit-eu-cra
Command: npx skills add https://github.com/tractorjuice/arckit-kimi --skill arckit-eu-cra

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill simplifies the complex regulatory burden of the EU Cyber Resilience Act (CRA) by automating the assessment of product compliance, risk classification, and documentation requirements for digital products.

Core Features & Use Cases

  • Regulatory Scoping: Automatically determines if a product falls under CRA scope based on market placement and sector exclusions.
  • Risk Classification: Evaluates products against Annex III criteria to identify Class I or Class II requirements.
  • Compliance Mapping: Generates a comprehensive assessment document covering security-by-design, vulnerability management, and incident reporting obligations.

Quick Start

Use the arckit-eu-cra skill to generate a full compliance assessment for your current project by providing the product type and market details.

Frequently Asked Questions about arckit-eu-cra

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I check if my digital product falls under EU Cyber Resilience Act scope?

To check EU Cyber Resilience Act scope, evaluate your product against market placement criteria and sector exclusions. The regulation applies to manufacturers placing products with digital elements on the EU market, automatically determining applicability through regulatory scoping analysis.

How do I perform risk classification for products under the CRA regulation?

To perform CRA risk classification, evaluate products against Annex III criteria to identify Class I or Class II requirements. This assessment determines the specific security obligations and conformity assessment procedures needed for your digital product compliance.

What technical documentation is required for Cyber Resilience Act compliance?

Cyber Resilience Act compliance requires technical documentation covering security-by-design, vulnerability management, and incident reporting obligations. Mandatory assessment documents must be generated to satisfy regulatory reporting and conformity assessment standards for digital products placed on the EU market.

Can I automate gap analysis for EU CRA regulatory reporting?

Yes, you can automate gap analysis for EU CRA regulatory reporting by assessing compliance obligations and security requirements. This generates a comprehensive assessment document identifying gaps between current product security and mandatory regulatory standards.

Does this CRA compliance tool support both Class I and Class II product assessments?

Yes, this CRA compliance tool supports both Class I and Class II product assessments by evaluating products against Annex III criteria. It identifies the correct risk classification to determine applicable security requirements and conformity assessment standards for your product.

What is the best way to map security-by-design requirements for EU digital product regulations?

The best way to map security-by-design requirements for EU digital product regulations is through compliance mapping. This generates a comprehensive assessment document covering vulnerability management and incident reporting obligations mandated by the Cyber Resilience Act.