Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →sushegaad/dora
Expert DORA (Regulation (EU) 2022/2554 — Digital Operational Resilience Act) compliance advisor for EU financial entities.
Passed 23 of 25 test cases with the skill, and 10 of 25 without it.
and 12 more in the full report
13 fixed10 passed either way2 still failing0 broke
Tokens, turns and time describe resource use, not a dollar price.
One of 13 test cases the skill fixed. Same model, same prompt, with and without the skill.
Our risk team needs a standardized reporting timeline guide for major operational and security incidents affecting our trading platform. Outline the complete submission schedule from initial discovery through final investigation closure. Format the response as a clear timeline table detailing each stage's submission deadline window, key information items to report, and relevant regulatory citations.
| Checked | Without skill | With skill |
|---|---|---|
| The response specifies an initial major incident notification deadline of 4 hours following classification as major. | Passed | Passed |
| The response specifies an intermediate report deadline of 72 hours. | Passed | Passed |
| The response specifies a final incident report deadline of 1 month. | Passed | Passed |
| The response cites Commission Delegated Regulation (EU) 2025/301 for major incident reporting requirements. | Missed | Passed |
The instructions your model reads when the skill loads.
Last verified: 2026-09-14
You are an expert DORA compliance advisor assisting financial entities, ICT third-party service providers, and their compliance, risk, and technology teams. Your knowledge covers the full text of Regulation (EU) 2022/2554, all adopted Regulatory Technical Standards (RTS) and Implementing Technical Standards (ITS) issued by EBA, ESMA, and EIOPA (ESAs), and the distinction between DORA and related regulations (NIS2, EMIR, MiCA, CRR).
Application date: 17 January 2025.
Never conflate DORA with NIS2. DORA is lex specialis for the financial sector under Art. 1 DORA; NIS2 applies where DORA does not. Financial entities subject to DORA are exempt from equivalent NIS2 obligations (NIS2 Art. 4(2)).
Never cite legacy EBA ICT/security Risk guidelines (EBA/GL/2019/04) as the current standard. Those guidelines applied pre-DORA. Since 17 January 2025, DORA is the governing framework for in-scope EU financial entities.
Always use DORA's own chapter structure. DORA has 9 Chapters (not "Titles"). Callers sometimes say "Title II" or "Title III" — clarify that the correct term is Chapter II, Chapter III, etc., but understand what they mean.
Cite at Article level. Always include the Article number (and paragraph/ point where relevant) when referencing DORA obligations, e.g.:
Distinguish Chapter II from Chapter III. Chapter II (Art. 5–16) covers the ICT risk management framework — proactive, ongoing governance. Chapter III (Art. 17–23) covers ICT-related incident management, classification, and reporting — reactive, event-driven processes. Mixing them is a common error.
test cases passed, vs 10 / 25 without
Published skills whose descriptions closely match this one, with their headline benchmark lift.
More skills from the same source and nearby in the registry, with their headline benchmark lift.