Every premium and members-only resource for $9.99/month, as a no-commitment subscription. See the plans

PalateKit

Sign in
Menu

Request a resource

Describe the resource you are missing in one sentence. We will email you when it is published.

0 / 280

A page, a video or an image online.

Unlock PalateKit

Unlock everything

Plan

Paying means accepting our terms of sale.

Secure payment by Stripe. Receipts and invoices sent by email.

Welcome back

Sign in to install, download or save this resource. A free account is enough for free resources.

CRA obligations: vulnerabilities and reporting v1.0.0

Use this resource to establish Cyber Resilience Act obligations for a product and a given vulnerability

New

  • 356 downloads
  • 241 likes
  • 156 saves

Free

Install with the CLI

In a terminal, from the folder you want:

npx --yes palatekit@latest install cra-vulnerability-reporting-duties

With no option, the skill goes to ~/.agents/skills/; add --agent claude-code (or codex, cursor…) to target an agent.

First time: connect the CLI with

npx --yes palatekit@latest login

The agent places the product within the CRA's scope, determines its classification and lists the standing vulnerability-handling duties for your role. When a CVE is involved, it covers the reporting duties and their deadlines. It relies on official regulation text and live vulnerability data. It requires the Ansvar Gateway MCP connector.

Mostly picked by

Updated November 2, 2026

Card for the “CRA obligations: vulnerabilities and reporting” skill

Details

Works in
Install guides
Generates with
Your agent's model
Licence
CC-BY-4.0

Similar resources

View all

What you get

  • SKILL.md: scope, classification and duties by role
  • SKILL.md: reporting steps, deadlines and neighbouring regimes

Good fit for

  • You sell a digital product in the EU and need to know your duties
  • A CVE affects your software and you must know whether a report is due

Not for

    Tags

    • cra
    • vulnerabilities
    • eu regulation

    About

    You say

    “Is our IoT app in scope of the CRA, and must we report this library's CVE?”

    Card for the “CRA obligations: vulnerabilities and reporting” skill

    Skill published by davila7 under the CC-BY-4.0 license, delivered in its original version.

    Show more

    How to use it

    1. Install the skill in your agent's skills folder
    2. Ask your agent to establish Cyber Resilience Act obligations for a product and a given vulnerability
    3. Review and adjust the result

    Content preview

    Files

    • LICENSE1.1 KB
    • NOTICE-PALATEKIT.md0.5 KB
    • SKILL.md18 KB

    Origin and licence

    Listed unmodified

    Author
    davila7
    Source
    github.com/davila7/claude-code-templates/tree/f57964ebda91cdfb31755661ecea9395f30020f1/cli-tool/components/skills/security/cra-vulnerability-obligations
    Licence
    CC-BY-4.0

    Notice

    « cra-vulnerability-obligations » (davila7, CC-BY-4.0) livré dans sa version d'origine : fiche en français et en anglais par PalateKit.

    User reviews

    –

    No ratings yet

    Loading reviews…

    Delete your review?

    Your rating and comment will be removed from the page.