Ready to supercharge your AI agents?

Install any skill in seconds. Free to start, no credit card required.

NYDFS Expert · grcengclub | DecimalAI

legalby grcengclub

NYDFS Expert

grcengclub/nydfs-expert

Source grcengclub/claude-grc-engineering ↗License NOASSERTION

NYDFS 23 NYCRR 500 expert for financial services. Deep knowledge of New York Department of Financial Services cybersecurity requirements including all 23 sections, annual certification, CISO requirements, penetration testing, incident notification, and third-party risk management.

SkillScore95Maintained

Automatic

FinServ Compliance pack

Last verified 8/23/2026

What it changes

Passed 21 of 22 test cases with the skill, and 17 of 22 without it.

Without skill77%

With skill95%

Checks it passed that the model alone missed

Requires role-based training addressing social engineering risks.
States that vulnerability assessments are required bi-annually or twice per year.
States that vulnerability assessments must be conducted bi-annually or twice per year minimum.

and 1 more in the full report

4 fixed17 passed either way1 still failing0 broke

Pass-rate lift: +18 pp
Tokens: +200%
Agent turns: 0%
Response time: -4%

Model gemini-3.6-flashMeasured 8/23/2026v121 of 22 cases passed with skill

Tokens, turns and time describe resource use, not a dollar price.

Use this skill

Save it into your project's skills folder. Claude Code picks it up in its next session.

curl -fsSL --create-dirs -o .claude/skills/grcengclub-nydfs-expert/SKILL.md https://app.decimal.ai/s/grcengclub-nydfs-expert/SKILL.md

Want it pinned and updatable? pip install "decimalai>=0.15", then decimalai skills add grcengclub-nydfs-expert, and start Claude Code with claude --plugin-dir "$(git rev-parse --show-toplevel)/.agents"

1 · One-time — install the CLI (docs ↗)

pip install "decimalai>=0.15"

2 · Get the skill — writes .agents/skills/grcengclub-nydfs-expert/ and pins it in .decimal/skills.lock

decimalai skills add grcengclub-nydfs-expert

No CLI? Get the same file — curl · raw file

curl -fsSL --create-dirs -o .claude/skills/grcengclub-nydfs-expert/SKILL.md https://app.decimal.ai/s/grcengclub-nydfs-expert/SKILL.md

Raw file: /s/grcengclub-nydfs-expert/SKILL.md ↗ · machine-readable summary at /s/grcengclub-nydfs-expert.json ↗

Safety checks: 3 of 3 passed

Code scan CleanIntent PassedContent Clean

See it in action

One of 4 test cases the skill fixed. Same model, same prompt, with and without the skill.

1 of 4

Prompt

Our NY-licensed mortgage firm is updating its CISO reporting structure and evaluating vendor oversight policies. Please write an executive briefing memo formatted for our senior board members that outlines the specific compliance obligations, reporting lead times, and mandatory policy components required by New York financial cybersecurity rules when modifying CISO arrangements or contracting third-party service providers.

What was checked, without and with the skill
Checked	Without skill	With skill
Specifies a 15-day advance notice period to NYDFS for material changes to CISO designation or reporting structure.	Missed	Passed
Outlines third-party service provider due diligence requirements under 23 NYCRR 500.11.	Passed	Passed

case-01 · gemini-3.6-flash · 8/23/2026 · answers are capped and redacted

What's inside

The instructions your model reads when the skill loads.

SKILL.md1051 linessingle file

NYDFS Expert

Deep expertise in New York Department of Financial Services (NYDFS) 23 NYCRR 500 cybersecurity requirements for financial services institutions.

Expertise Areas

NYDFS 23 NYCRR 500 Overview

Official Title: "Cybersecurity Requirements for Financial Services Companies" Authority: New York Department of Financial Services (Superintendent) Effective Date: March 1, 2017 (phased implementation through February 2019) Major Amendment: November 1, 2023 (significant updates) Scope: Financial services institutions operating in New York State Annual Certification: Due April 15 each year

Regulatory Authority:

NY Financial Services Law Section 201
NY Insurance Law Section 302
NY Banking Law Article 2
Superintendent's emergency rulemaking authority

Purpose:

Protect consumer financial data
Ensure operational resilience of financial sector
Establish minimum cybersecurity standards
Promote cybersecurity risk management culture
Align NY with leading cybersecurity practices

Covered Entities

Financial Institutions Subject to 23 NYCRR 500:

State-chartered banks
Foreign bank branches in NY
Trust companies and private bankers
Insurance companies (life, health, P&C)
Insurance agents and brokers
Licensed lenders and mortgage companies

Track record

Benchmark

21 / 22

test cases passed, vs 17 / 22 without

Adoption

Users: 0
Times used: 0

Safety and source details

SkillSafety

✓ 3 of 3 passed

Code scan15 of 15 checks clean

0 critical · 0 warning · 0 info — scanner v4 — 8/3/2026

View 15 scanner checks

live_secretremote_code_executionreverse_shelldata_exfiltrationssrf_metadataagent_snoopinganti_refusaldestructive_commandsobfuscated_unicodeunicode_homoglyphopaque_blobsuspicious_urltool_overreachtrigger_abuseprompt_injection_phrasing

IntentSafe

LLM judge · does the skill do what it claims

ContentClean

LLM judge · policy & harmful-content review

Source

Imported

grcengclub / claude-grc-engineering

plugins/frameworks/nydfs/skills/nydfs-expert/SKILL.md

View on GitHub ↗

License NOASSERTIONImported 8/3/2026Version v1

More skills from the same source and nearby in the registry, with their headline benchmark lift.

Ready to supercharge your AI agents?

See it in action

What's inside

NYDFS Expert

Expertise Areas

NYDFS 23 NYCRR 500 Overview

Covered Entities

Track record

Benchmark

Adoption

SkillSafety

Source

Related skills