diff --git a/.claude-plugin/marketplace.json b/.claude-plugin/marketplace.json index b415858..e79f5ee 100644 --- a/.claude-plugin/marketplace.json +++ b/.claude-plugin/marketplace.json @@ -12,7 +12,7 @@ "source": { "source": "github", "repo": "better-isms/grcskills", - "ref": "v2026.10.20.1" + "ref": "v2026.10.20.2" }, "category": "security", "tags": [ diff --git a/AGENTS.md b/AGENTS.md index 829a80a..a87d401 100644 --- a/AGENTS.md +++ b/AGENTS.md @@ -14,21 +14,21 @@ This is the grcskills library: open, task-level GRC skills (Agent Skills format) ## Install -Install from the current release tag, `v2026.10.20.1`, never from `main` (the integration branch). Releases are immutable and carry a build provenance attestation. +Install from the current release tag, `v2026.10.20.2`, never from `main` (the integration branch). Releases are immutable and carry a build provenance attestation. ```bash -npx skills add better-isms/grcskills#v2026.10.20.1 # whole library, interactive -npx skills add better-isms/grcskills#v2026.10.20.1 --skill # one skill -npx skills add better-isms/grcskills/skills/#v2026.10.20.1 # one author -npx skills add better-isms/grcskills#v2026.10.20.1 --list # list -git clone --branch v2026.10.20.1 https://github.com/better-isms/grcskills # clone +npx skills add better-isms/grcskills#v2026.10.20.2 # whole library, interactive +npx skills add better-isms/grcskills#v2026.10.20.2 --skill # one skill +npx skills add better-isms/grcskills/skills/#v2026.10.20.2 # one author +npx skills add better-isms/grcskills#v2026.10.20.2 --list # list +git clone --branch v2026.10.20.2 https://github.com/better-isms/grcskills # clone ``` The `#` suffix makes the skills CLI clone that tag. Target an agent with `-a claude-code`, `-a cursor`, `-a codex`. Claude Code users can also run `/plugin marketplace add better-isms/grcskills` then `/plugin install grcskills@grcskills`; the plugin pins the release tag. Without a terminal, download the skill folder from the release and place it in the agent's skills directory. ## Run the whole library against a setup -1. Make the library available: an install, or `git clone --branch v2026.10.20.1 https://github.com/better-isms/grcskills` into a temporary folder (ask first). +1. Make the library available: an install, or `git clone --branch v2026.10.20.2 https://github.com/better-isms/grcskills` into a temporary folder (ask first). 2. Open `skills/tristan-roth/grc-setup-review/SKILL.md` and follow it. It reads only the frontmatter of every skill, inspects the user's compliance material read-only, ranks the top 10 skills with impact, effort and a cited reason, audits what is broken, duplicated or missing, and writes `grc-setup-review/*.md` in the user's working folder. 3. To run any ranked skill, read its `SKILL.md` in full, then follow it. Each skill names the files it writes. diff --git a/CHANGELOG.md b/CHANGELOG.md index d74c307..6618b89 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -4,7 +4,10 @@ Release tags are `vYYYY.MM.DD[.n]`. Installers and the Claude Code plugin consum ## Unreleased -- grcskills.com/faq/: 29 questions and answers (what it is, who it is for, who wrote it, cost, frameworks, agents, install, client data and safety, stale evidence, policy changes, traceability, ISMS Copilot, updates, contributing), many from questions asked under the launch post. One source in `site/lib/faq.ts` feeds the page and its FAQPage JSON-LD; a test checks they match. FAQ added to the menu, footer, sitemap and llms.txt; `faq` is a reserved author slug. +## v2026.10.20.2 + +- grcskills.com/faq/: 29 questions and answers (what it is, who it is for, who wrote it, cost, frameworks, agents, install, client data and safety, stale evidence, policy changes, traceability, ISMS Copilot, updates, contributing), many from questions asked under the launch post. One source in `site/lib/faq.ts` feeds the page and its FAQPage JSON-LD; a test checks they match. FAQ added to the menu, footer, sitemap and llms.txt; `faq` is a reserved author slug (#12). +- Every install pin moves to `v2026.10.20.2`. ## v2026.10.20.1 diff --git a/README.md b/README.md index 449ec91..be4c10d 100644 --- a/README.md +++ b/README.md @@ -4,7 +4,7 @@ grcskills. Open GRC skills for AI agents. It does the legwork. You make the calls. -[![License: MIT](https://img.shields.io/badge/license-MIT-0f172a?style=flat-square)](LICENSE) [![Release v2026.10.20.1](https://img.shields.io/badge/release-v2026.10.20.1-0f172a?style=flat-square)](https://github.com/better-isms/grcskills/releases/tag/v2026.10.20.1) [![60 skills](https://img.shields.io/badge/skills-60-0f172a?style=flat-square)](https://grcskills.com/skills/) [![Agent Skills format](https://img.shields.io/badge/format-Agent%20Skills%20(SKILL.md)-0f172a?style=flat-square)](AGENTS.md) [![Works with Claude Code, Codex and Cursor](https://img.shields.io/badge/works%20with-Claude%20Code%20%7C%20Codex%20%7C%20Cursor-0f172a?style=flat-square)](#install) [![By ISMS Copilot](https://img.shields.io/badge/by-ISMS%20Copilot-0f172a?style=flat-square)](https://www.ismscopilot.com/mcp?ref=grcskills-readme) +[![License: MIT](https://img.shields.io/badge/license-MIT-0f172a?style=flat-square)](LICENSE) [![Release v2026.10.20.2](https://img.shields.io/badge/release-v2026.10.20.2-0f172a?style=flat-square)](https://github.com/better-isms/grcskills/releases/tag/v2026.10.20.2) [![60 skills](https://img.shields.io/badge/skills-60-0f172a?style=flat-square)](https://grcskills.com/skills/) [![Agent Skills format](https://img.shields.io/badge/format-Agent%20Skills%20(SKILL.md)-0f172a?style=flat-square)](AGENTS.md) [![Works with Claude Code, Codex and Cursor](https://img.shields.io/badge/works%20with-Claude%20Code%20%7C%20Codex%20%7C%20Cursor-0f172a?style=flat-square)](#install) [![By ISMS Copilot](https://img.shields.io/badge/by-ISMS%20Copilot-0f172a?style=flat-square)](https://www.ismscopilot.com/mcp?ref=grcskills-readme) # Open GRC skills for AI agents. @@ -51,17 +51,17 @@ The prompt carries no version: [grcskills.com/llms.txt](https://grcskills.com/ll ## Install -Every install path is pinned to a release tag (`v2026.10.20.1`). Releases are immutable and carry a build provenance attestation; `main` is the integration branch and is not an install source. +Every install path is pinned to a release tag (`v2026.10.20.2`). Releases are immutable and carry a build provenance attestation; `main` is the integration branch and is not an install source. ```bash # the whole library, with an interactive picker (skills.sh) -npx skills add better-isms/grcskills#v2026.10.20.1 +npx skills add better-isms/grcskills#v2026.10.20.2 # one skill -npx skills add better-isms/grcskills#v2026.10.20.1 --skill risk-register-first-pass +npx skills add better-isms/grcskills#v2026.10.20.2 --skill risk-register-first-pass # see what is there -npx skills add better-isms/grcskills#v2026.10.20.1 --list +npx skills add better-isms/grcskills#v2026.10.20.2 --list ``` The `#` suffix makes the skills CLI clone that tag instead of the default branch. Add `-a claude-code`, `-a cursor` or `-a codex` to target one agent. @@ -69,7 +69,7 @@ The `#` suffix makes the skills CLI clone that tag instead of the default b **Clone** the release tag: ```bash -git clone --branch v2026.10.20.1 https://github.com/better-isms/grcskills +git clone --branch v2026.10.20.2 https://github.com/better-isms/grcskills ``` **Claude Code plugin** (every skill plus the optional framework lookup server):