Ready to supercharge your AI agents?

Install any skill in seconds. Free to start, no credit card required.

NIS2 Compliance Navigator · lawve-ai | DecimalAI

legalby lawve-ai

NIS2 Compliance Navigator

lawve-ai/nis2-navigator

Source lawve-ai/awesome-legal-skills ↗License NOASSERTION

NIS2 Compliance Navigator — scope classification, Art. 21 gap analysis (0-4 maturity scoring), and compliance roadmap under EU Directive 2022/2555 with deep German BSIG-neu coverage and profiles for Italy, France, Netherlands, Austria, Spain.

SkillScore68Maintained

Automatic

Security & AppSec pack

Last verified 8/16/2026

What it changes

Passed 16 of 23 test cases with the skill, and 13 of 23 without it.

Without skill56%

With skill68%

Checks it passed that the model alone missed

Displays legal disclaimer at session start
Rates maturity levels on a 0 to 4 numeric scale
Maps ISO 27001 Annex A controls A.5.1 and A.5.2 to NIS2 Article 21 paragraph 2a

and 4 more in the full report

6 fixed11 passed either way5 still failing3 broke

Pass-rate lift: +12 pp
Tokens: +104%
Agent turns: 0%
Response time: -26%

Model gemini-3.6-flashMeasured 8/16/2026v117 of 25 cases passed with skill · 23 comparable

Tokens, turns and time describe resource use, not a dollar price.

Use this skill

Save it into your project's skills folder. Claude Code picks it up in its next session.

curl -fsSL --create-dirs -o .claude/skills/lawve-ai-nis2-navigator/SKILL.md https://app.decimal.ai/s/lawve-ai-nis2-navigator/SKILL.md

Want it pinned and updatable? pip install "decimalai>=0.15", then decimalai skills add lawve-ai-nis2-navigator, and start Claude Code with claude --plugin-dir "$(git rev-parse --show-toplevel)/.agents"

1 · One-time — install the CLI (docs ↗)

pip install "decimalai>=0.15"

2 · Get the skill — writes .agents/skills/lawve-ai-nis2-navigator/ and pins it in .decimal/skills.lock

decimalai skills add lawve-ai-nis2-navigator

No CLI? Get the same file — curl · raw file

curl -fsSL --create-dirs -o .claude/skills/lawve-ai-nis2-navigator/SKILL.md https://app.decimal.ai/s/lawve-ai-nis2-navigator/SKILL.md

Raw file: /s/lawve-ai-nis2-navigator/SKILL.md ↗ · machine-readable summary at /s/lawve-ai-nis2-navigator.json ↗

Safety checks: 3 of 3 passed

Code scan CleanIntent PassedContent Clean

See it in action

One of 6 test cases the skill fixed. Same model, same prompt, with and without the skill.

1 of 6

Prompt

We are starting a NIS2 readiness review for our enterprise. What preliminary operational choice must be established before analyzing our legal obligations?

What was checked, without and with the skill
Checked	Without skill	With skill
Identifies selecting jurisdiction focus as a mandatory session initialization step	Missed	Passed

case-19 · gemini-3.6-flash · 8/16/2026 · answers are capped and redacted

What's inside

The instructions your model reads when the skill loads.

SKILL.md216 lines7 files

NIS2 Compliance Navigator

Guide users through a full NIS2 compliance assessment: scope determination, Art. 21 gap analysis across 10 risk management measures, and prioritized compliance roadmap. Covers EU Directive 2022/2555 with deep German national transposition (BSIG-neu) and high-level profiles for Italy, France, Netherlands, Austria, and Spain.

Session Initialization

1. Display Disclaimer (show at session start, do not block)

Important: This skill provides structured NIS2 compliance guidance based on EU Directive 2022/2555 and national transposition laws. It is not legal advice. Final compliance decisions should involve your organisation's CISO / Information Security Officer and qualified legal counsel experienced in cybersecurity regulation.

2. Web Search on Activation

Search for current regulatory developments before starting — NIS2 transposition is still evolving in many Member States, and enforcement practice is developing rapidly:

NIS2 enforcement updates [current year]
NIS2 implementing regulation EU Commission [current year]

For the full catalog of official EU and BSI sources, load references/regulatory-sources.md when you need to cite specific guidance or direct the user to official resources.

3. Determine Jurisdiction Focus

"Will this assessment focus on (a) EU-level NIS2 Directive obligations, (b) a specific Member State's national law, or (c) both?"

EU-level only → Use Directive references (Art. 21, Art. 23, Annexes I/II)
Germany → Load references/germany-nis2umsucg.md. Use § references (§ 28, § 30, § 32 BSIG-neu) and BSI-specific obligations
Italy, France, Netherlands, Austria, or Spain → Load references/eu-jurisdiction-profiles.md. These profiles highlight key national differences — a full deep-dive with local counsel is still necessary. Verify transposition status via web search, since several laws are still in legislative process
Both (e.g., EU + Germany) → Lead with Directive, layer national specifics where they diverge
Cross-border group → Flag that multiple transpositions apply. Load relevant profiles and recommend local counsel per jurisdiction
Any other Member State → The EU-level assessment is fully applicable. National specifics will need separate research

Phase 1: Scope & Classification (~5 minutes)

Determine whether the organization falls under NIS2 and classify as essential or important. This is the most common first question any entity has, and getting the classification right is foundational — it determines enforcement intensity, fine levels, and reporting obligations.

For German entities, mention the BSI's free Betroffenheitsprüfung (betroffenheitspruefung-nis-2.bsi.de) as a complementary first step. Note it only covers scope — our assessment goes further into compliance maturity and roadmap.

Ask questions ONE AT A TIME in this order:

Track record

Benchmark

16 / 23

test cases passed, vs 13 / 23 without

Adoption

Users: 0
Times used: 0

Safety and source details

SkillSafety

✓ 3 of 3 passed

Code scan15 of 15 checks clean

0 critical · 0 warning · 0 info — scanner v4 — 8/3/2026

View 15 scanner checks

live_secretremote_code_executionreverse_shelldata_exfiltrationssrf_metadataagent_snoopinganti_refusaldestructive_commandsobfuscated_unicodeunicode_homoglyphopaque_blobsuspicious_urltool_overreachtrigger_abuseprompt_injection_phrasing

IntentSafe

LLM judge · does the skill do what it claims

ContentClean

LLM judge · policy & harmful-content review

Source

Imported

lawve-ai / awesome-legal-skills

skills/nis2-navigator-oliver-schmidt-prietz/SKILL.md

View on GitHub ↗

License NOASSERTIONImported 8/3/2026Version v1Bundled 6 files

Other skills for the same job

Published skills whose descriptions closely match this one, with their headline benchmark lift.

sushegaad/nis2EU NIS2 Directive (Directive (EU) 2022/2555) compliance advisor for essential and important entities: entity classification, Art. 21 risk management measures, Art. 23 incident reporting timelines (24h/72h/1 month), Art. 20 governance obligations, supply chain security (Art. 21(2)(d); coordinated risk assessments Art. 22), gap assessments, policy drafting, ISO 27001 alignment, and penalty exposure analysis. Also covers Commission Implementing Regulation (EU) 2024/2690, the technical/methodologicaClose match+5 pp pass-rate lift

More skills from the same source and nearby in the registry, with their headline benchmark lift.

Ready to supercharge your AI agents?

See it in action

What's inside

NIS2 Compliance Navigator

Session Initialization

1. Display Disclaimer (show at session start, do not block)

2. Web Search on Activation

3. Determine Jurisdiction Focus

Phase 1: Scope & Classification (~5 minutes)

Track record

Benchmark

Adoption

SkillSafety

Source

Other skills for the same job

Related skills