Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →grcengclub/nist-ai-rmf-expert
NIST AI 100-1 (AI RMF 1.0) expert. Stub-depth framework plugin that routes to the SCF crosswalk. Level up by adding framework-specific context, assessment workflow, and evidence patterns.
Passed 18 of 22 test cases with the skill, and 9 of 22 without it.
and 6 more in the full report
9 fixed9 passed either way4 still failing0 broke
Tokens, turns and time describe resource use, not a dollar price.
One of 9 test cases the skill fixed. Same model, same prompt, with and without the skill.
We are configuring our automated compliance parser for NIST AI 100-1. What key string identifies this framework in Secure Controls Framework crosswalks?
| Checked | Without skill | With skill |
|---|---|---|
| Provides general-nist-100-1-ai-rmf as the framework identifier | Missed | Passed |
The instructions your model reads when the skill loads.
Stub-depth expertise for NIST AI 100-1 (AI RMF 1.0). This plugin is scaffolded from the SCF crosswalk (158 SCF controls map to 91 framework controls) and defers to /grc-engineer:gap-assessment for the actual compliance check.
general-nist-100-1-ai-rmfAI RMF is an outcomes framework, not a control catalog and not a certification. It organizes outcomes as Function → Category → Subcategory across four functions — GOVERN, MAP, MEASURE, MANAGE — applied across the AI system lifecycle. Subcategories describe desired risk-management outcomes; they do not prescribe specific controls. Concrete controls come from the SCF crosswalk: 158 SCF controls map to 91 AI RMF subcategories, referenced by subcategory ID (e.g. GOVERN 1.1, MAP 2.3), never by paraphrased prose.
Common failure modes when working with this framework: treating AI RMF as a control catalog to "implement", confusing the four functions with maturity levels, and mapping to subcategory prose instead of subcategory IDs.
TODO: replace with framework-specific overview. Minimum sections for Reference-depth upgrade:
All commands in this plugin route through /grc-engineer:gap-assessment with framework ID general-nist-100-1-ai-rmf. Reference-depth plugins add:
evidence-checklist — framework-native evidence by control familyscope — applicability determination for the organizationFull-depth plugins add framework-specific workflow commands (examples in sibling plugins like soc2, fedramp-rev5, pci-dss).
See the Framework Plugin Guide for the Stub → Reference → Full progression checklist.
test cases passed, vs 9 / 22 without
More skills from the same source and nearby in the registry, with their headline benchmark lift.