Individual skill

cn-mlps-checklist

Use when asked 等保怎么做, 等保 2.0 定级, 等保备案和测评流程, 等保三级要求, 我们的系统需要过等保吗, or prepare an information system for China's Multi-Level Protection Scheme (MLPS 2.0, 网络安全等级保护). Produces a grading recommendation (定级) with the reasoning for the expert review, the filing (备案) and assessment (测评) steps and their usual timing, a gap checklist across the ten control areas of GB/T 22239-2019, and a remediation plan, marked as preparation for a licensed assessor.

plugins/pm-china-compliance/skills/cn-mlps-checklist/SKILL.md

Read pinned source

Source commit f7c90bc09ee05dc25cf257bdb1826f2c2552c2cb

What was checked

Matches the observed repository HEAD
Yes
Scanner rules are current
Yes
Repository scan complete
No
Skill scan complete
No
Observed behavior
Network or broad shell
Last checked
Nov 9, 2026

These are observations at the recorded commit, not a guarantee of safety. Review the source before running it.

Install this skill

Choose an agent in your Stack or copy a command below. Commands fetch the pinned commit and copy only this skill directory. Existing destinations are refused. Copying a command does not install anything.

An install command is unavailable: current rules, complete repository and skill scans, an eligible behavior level and a permitted license are required.

Repository context

Repository stars (not skill ratings)
1,540
Repository last updated
Nov 10, 2026
License
MIT

Observed agent integration: No specific integration evidence. Standard SKILL.md installation does not imply verified compatibility.

Files and excerpt

File metadata and permitted, redacted excerpts come from the recorded scan. Source links are pinned to that commit.

Browse files
Read excerpt

# MLPS 2.0 Checklist (等保 2.0)

China's Cybersecurity Law requires network operators to protect their systems under the Multi-Level Protection Scheme. In practice that means grading each system, filing with the public security bureau for level two and above, passing an assessment by a licensed body (测评机构), and fixing what it finds. Teams lose months by grading wrongly or arriving at the assessment with gaps they could have closed. This skill prepares the grading argument, the filing, and the gap list before the assessor arrives.

Write in Simplified Chinese unless asked otherwise. This is preparation, not certification: grading is confirmed through expert review and the public security bureau, and only a licensed assessor can assess. Check current requirements with the local 网安部门 and the assessor.

## Required Inputs

Ask for these if not provided:
- **The system**: what it does, users, data it holds (including personal and important data), and whether it serves the public
- **Impact if compromised**: on individuals, organisations, social order or national security, and how severe
- **Architecture**: hosting (own data centre or cloud, and the cloud's own MLPS level), network zones, key components
- **Existing controls and policies**, and any previous assessment reports
- **Deadline** driving the work (a tender, a regulator, a customer)
Back to top