Cra Readiness

Evidence-backed readiness assessment of a software or hardware product against the EU Cyber Resilience Act, Regulation (EU) 2024/2847, using the pinned Official Journal text, Implementing Regulation (EU) 2025/2392 and the Commission's 2026 guidance. Use when the user mentions the CRA, Cyber Resilience Act, CE marking for software, products with digital elements, Annex I essential requirements, SBOM obligations, vulnerability handling, the 11 September 2026 reporting duty, ENISA single reporting platform, support period, substantial modification, important or critical products, or asks to prepa

5 stars 1 forksSoftware Development

Install

skills CLI (Claude Code, Cursor, Codex and more)

npx skills add Killerz007/cra-readiness-skill --skill cra-readiness

Manual install

git clone --depth 1 https://github.com/Killerz007/cra-readiness-skill.git /tmp/cra-readiness-skill
mkdir -p ~/.claude/skills
cp -r /tmp/cra-readiness-skill/. ~/.claude/skills/cra-readiness

Personal skills live in ~/.claude/skills. Use .claude/skills in a project folder to share a skill with your team.

From the SKILL.md

# CRA Readiness Assessment Skill

## 1. Purpose

Use this skill when a manufacturer, developer, importer, distributor or open-source steward wants to know where a product with digital elements stands against the EU Cyber Resilience Act (CRA) and what must change before it can be placed on the EU market, or before the manufacturer can answer a market surveillance authority, a notified body or a customer.

This is an **independent readiness methodology**. It is not a conformity assessment, not a notified-body service, not legal advice, and it never results in CE marking. The manufacturer alone signs the EU declaration of conformity under its sole responsibility (Article 28(4)).

## 2. Non-negotiable principles

1. **Official text first.** The pinned Official Journal text of Regulation (EU) 2024/2847, Implementing Regulation (EU) 2025/2392 and Delegated Regulation (EU) 2026/881 are the criteria. Commission guidance C(2026) 5252 and the Commission FAQ are interpretive aids and are cited as non-binding. Blog posts, vendor material and training content are never criteria.
2. **Pin the law and the product.** Record the source hashes from `official/upstream-manifest.json`, the date-sensitive status checks in `references/legal-status-and-dates.md`, and the exact product version, commit, build artefacts, deployment and remote data processing solutions assessed.

Read the full skill on GitHub

Details

Skill name: cra-readiness
Repository: Killerz007/cra-readiness-skill
License: Apache-2.0
Repo updated: 6 October 2026

FAQ

What does the Cra Readiness skill do?

How do I install the Cra Readiness skill?

skills CLI (Claude Code, Cursor, Codex and more): npx skills add Killerz007/cra-readiness-skill --skill cra-readiness. Skills go in ~/.claude/skills (personal) or .claude/skills (project), and Claude loads them automatically when a task matches the description.

Is Cra Readiness popular?

It lives in Killerz007/cra-readiness-skill, which has 5 GitHub stars and 1 forks.

Related skills

Fact Check X Complete

ASI2030/Fact-Check-X

面向真实业务决策的多平台事实核验 Skill。正式支持深知晓、深知晓（深度溯源）、豆包、腾讯元宝、DeepSeek 和通义千问，按用户输入动态选择 N≥1 个平台。完整采集原回答、引用、截图与页面存证，结构化比较关键事实，按需使用可信搜索逐点核验权威证据，并评估各平台表现。权威答案是核验产物之一，原始证据、冲突与证据边界全程可追溯。基础采集与对比无需 API Key；可信搜索是权威核验阶段的可选增强。语义工作由 Codex、Claude Code、WorkBuddy 等当前运行载体完成，不调用外部大模型 API。

Software DevelopmentIn 1 list

Substack API

AnthonyDavidAdams/substack-api-reference

Use Substack's unofficial cookie-authenticated API to read posts, create drafts, publish issues, and manage publications on behalf of a logged-in Substack user. Required when the user asks to post to Substack, schedule a Substack send, mirror content to Substack, or extract data from a Substack account.

Software Development

Trace My Code

kgohil/trace-my-code

Build and maintain a living trace of a codebase — the domain flow plus the underlying code structure and patterns — as curated Markdown that gives a coding agent the right, always-current context to develop features, follow existing patterns, and refactor safely without re-reading the whole repo. Use this whenever you map or document how a feature/flow works end to end, author or update a DOMAIN/ARCHITECTURE/DATA_FLOW doc or an ADR, record an architecture decision, onboard to or trace an unfamiliar area, link a service's docs to the services it talks to, or refresh docs after code changed — ev

Software DevelopmentIn 1 list

Skillize Any Lib

pointerliu/skillize-any-libs

Generate SKILL.md for any library by analyzing its source and real-world usage. Supports Rust, Python, JavaScript, Go, C/C++, and more.

Software Development

Anti Gold Plating

TulossSolutions/anti-gold-plating

Prevent gold plating (unapproved extras) through explicit scope, formal validation of improvements and alternatives, and a final compliance summary. Use when creating or modifying a deliverable, code, configuration, or system. A request for analysis or a proposal does not grant authorization for its implementation.

Software Development

Shipwright

saadjangda/shipwright

The only skill you need to build and ship world-class software — from idea to production. Covers the COMPLETE lifecycle: architecture design, domain modeling, service boundaries, data architecture, implementation with TDD, distinctive frontend design (anti-AI-slop), exhaustive QA across all layers, security hardening, scalability and load balancing, reliability engineering, performance optimization, accessibility (WCAG 2.1 AA), CI/CD, observability, and operational excellence. Applies Airbnb/Stripe/Meta-level engineering standards. Use this skill whenever: building something new ('let's build

Software Development

Browse the most popular Claude skills, all software development skills, or write your own with the skills generator.