skills.rest
intuitem
intuitemOFFICIAL
Explore all skills by this author →
WebsiteGitHub

mapping-builder

Generate crosswalk mappings between two CISO Assistant framework YAML files as requirement_mapping_set libraries.

4.4k|825|Updated Sep 20, 2023
Search Tags:#YAML#CISO Assistant#framework mapping#requirement mapping#crosswalk#GRC#Compliance
One-click install
npx skills add https://github.com/intuitem/ciso-assistant-community --skill mapping-builder
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: mapping-builder
Source: https://github.com/intuitem/ciso-assistant-community/tree/main/.claude/skills/mapping-builder
Command: npx skills add https://github.com/intuitem/ciso-assistant-community --skill mapping-builder

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires pyyaml, openpyxl, and includes scripts (resource) components.

What problem does it solve?

Creating a crosswalk between two cybersecurity compliance frameworks (e.g. NIST CSF and ISO 27001) requires manually comparing hundreds of requirements, which is slow and error-prone. This Skill guides an AI-assisted workflow that reasons over two CISO Assistant framework YAML files and produces a publishable requirement_mapping_set library plus human-review artifacts.

Core Features & Use Cases

  • Framework parsing and section affinity: Parse framework YAMLs into structured JSON, slice items by category (NIST CSF, ISO Annex A, numeric), and narrow candidate pairs by section affinity before deep comparison.
  • Schema-exact YAML emission: Write a mapping library YAML with forward and auto-derived reverse mapping sets (subset/superset flipped) that drops directly into backend/library/libraries/.
  • Review and audit tooling: Generate xlsx/csv review sheets, audit coverage and low-strength verdicts, diff against published mappings, and render a standalone interactive HTML heatmap preview.
  • Use Case: A contributor wants to map ccb-cff-2023-03-01.yaml to cyfun2025.yaml and submit it as a community mapping; the Skill walks through parsing, per-section verdicts, borderline review, and final YAML output ready for a PR.

Quick Start

Ask the assistant to build a mapping between two framework YAML files in backend/library/libraries/, providing the source and target file paths.

Frequently Asked Questions about mapping-builder

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I create a mapping between two CISO Assistant frameworks?▼

Provide the source and target framework YAML paths, then the workflow parses both files, builds a section-affinity table, reasons over candidate requirement pairs section by section, and emits a requirement_mapping_set YAML plus a review spreadsheet. The output matches the schema of existing mapping-*.yaml libraries.

What tools are needed to build a framework crosswalk YAML?▼

Only Python stdlib and pyyaml are required; there are no embedders, local LLMs, or vector databases involved. The scripts parse framework YAMLs, write the mapping YAML, generate review xlsx/csv files, audit verdicts, diff mappings, and render an HTML preview.

What are the limitations of conversation-based framework mapping?▼

Frameworks with more than 500 assessable items per side exceed the conversation context and should not be mapped this way. For large frameworks or deterministic batch runs, use the local CLI at tools/mapping_builder/map_v2.py, which has hybrid retrieval.

Does the mapping YAML include reverse mappings automatically?▼

Yes, the write_mapping_yaml.py script emits both the forward and reverse requirement_mapping_sets in one library. On the reverse set, subset and superset relationships are flipped automatically while equal and intersect stay unchanged.

Why does the parser warn about too few sections in NIST CSF frameworks?▼

NIST CSF-style frameworks expose only 5-6 top-level Functions, which is too coarse for section-affinity mapping. The parser warns in this case so you switch to Category-level slicing with cat_slice.py, grouping items by labels like ID.AM or PR.AC instead.

Related Skills

Explore More Legal & Compliance Skills→
intuitemintuitem
4.3k

ciso-assistant-bootstrap

Guide new users through initial CISO Assistant setup using MCP server tools.

Official
Advanced
justincordovajustincordova
1

code-review

Analyze code for quality issues, bugs, security risks, and correctness gaps.

Community
Advanced
ItamarZand88ItamarZand88
208

gap-analyzer

Parse a CLI's implemented commands and API map to emit a structured gap report.

Community
Advanced
AlexKapadiaAlexKapadia
6

wrap-local-script

Wrap a local Python script into a Pixie tool with tool.json and FastAPI main.py.

Community
Intermediate