Map security controls against mid-2026 regulatory requirements across 14 jurisdictions.
npx skills add https://github.com/blamejs/exceptd-skills --skill global-grc
Please help me install this Agent Skill. Skill: global-grc Source: https://github.com/blamejs/exceptd-skills/tree/main/skills/global-grc Command: npx skills add https://github.com/blamejs/exceptd-skills --skill global-grc
Most security and compliance tools rely on stale, pre-2020 threat models and framework documentation that fails to address mid-2026 attack patterns like prompt injection, MCP supply chain attacks, and AI-as-C2. Organizations operating across multiple jurisdictions struggle to map their existing controls to global regulatory requirements, leading to critical compliance gaps, unexpected fines, and unaddressed threat coverage.
Use the global-grc skill to map your organization's current security controls against EU NIS2 and DORA requirements to identify all compliance gaps for mid-2026 threat patterns.
High-intent search queries and answers about installing and using this skill.
To map security controls against global regulatory requirements, align your existing frameworks with mid-2026 threat reality across 14+ jurisdictions. This identifies critical compliance gaps, including missed incident notification timelines and AI risk management obligations for global enterprises.
Cross-border regulatory gap analysis covers 14 jurisdictions including EU, UK, AU, SG, JP, IN, and CA, alongside 2 global standards: ISO 27001:2022 and CSA CCM v4. This provides side-by-side comparison of incident notification timelines and enforcement penalties.
Identify unaddressed AI threat control gaps by surfacing 8+ critical vulnerabilities missing from national or global frameworks. This includes detecting prompt injection access control failures, MCP/agent trust boundary issues, and AI pipeline integrity requirements.
Yes, the compliance assessment supports incident notification timeline comparisons. It provides side-by-side summaries of incident notification deadlines, patch SLAs, and enforcement penalties across all 14+ covered global jurisdictions.
Yes, you can use this to check if your NIST-based compliance program misses EU AI Act Article 9 risk management obligations. It maps your current controls against mid-2026 regulatory requirements to quickly identify unaddressed high-risk AI system obligations.
Pre-2020 threat models fail to address mid-2026 attack patterns like MCP supply chain attacks and AI-as-C2. Relying on stale framework documentation leads to critical compliance gaps and unexpected fines across multi-jurisdiction operations.
bacocoIdentify security risks and produce threat models, gap assessments, and remediation backlogs.
KaakatiAudit application code, infrastructure, and processes against SOC2, HIPAA, PCI-DSS, and GDPR frameworks.
dexhunterAudit AI agent packages and MCP servers using LLM analysis and trust scores.
olehsvyrydovDraft jurisdiction-aware corporate contracts and GDPR/CCPA compliance documents.
