Menu

Individual skill

cmmc

0upvotes

Expert CMMC 2.0 (Cybersecurity Maturity Model Certification) advisor for US defense contractors and subcontractors in the Defense Industrial Base (DIB). Use this skill whenever a user asks about CMMC 2.0, CMMC Level 1, Level 2, or Level 3, DoD cybersecurity compliance, NIST SP 800-171, CUI (Controlled Unclassified Information) protection, System Security Plan (SSP), Plan of Action & Milestones (POA&M), C3PAO assessments, DIBCAC audits, self-assessment, SPRS score, or any requirement under DFARS 252.204-7012 or 7021. Also trigger for: "CMMC gap analysis", "CMMC readiness", "FCI protection", "CUI scoping", "CMMC practices", "DoD contract cybersecurity", "defense supply chain security", "prime contractor flow-down requirements", the July 2026 CMMC Phase 2 suspension, or the CMMC Reform Task Force.

plugins/cmmc/skills/cmmc/SKILL.md

Read pinned source

Source commit 5a9afcfce98efa4d64f75bead5e544ee06c38154

What was checked

Matches the observed repository HEAD
Yes
Scanner rules are current
No
Repository scan complete
No
Skill scan complete
Yes
Observed behavior
Not checked yet
Last checked
Nov 10, 2026

These are observations at the recorded commit, not a guarantee of safety. Review the source before running it.

Install this skill

Choose an agent in your Stack or copy a command below. Commands fetch the pinned commit and copy only this skill directory. Existing destinations are refused. Copying a command does not install anything.

An install command is unavailable: current rules, complete repository and skill scans, an eligible behavior level and a permitted license are required.

Repository context

Repository stars (not skill ratings)
1,064
Repository last updated
Nov 7, 2026
License
MIT

Observed agent integration: No specific integration evidence. Standard SKILL.md installation does not imply verified compatibility.

Files and excerpt

File metadata and permitted, redacted excerpts come from the recorded scan. Source links are pinned to that commit.

Browse files
Read excerpt

# CMMC 2.0 Compliance Skill

> **Last verified:** 2026-09-14

> ⚠<U+FE0F> **Program status (July 13, 2026):** DoD suspended **CMMC Phase 2** — including the C3PAO third-party assessment requirements due in new contracts from November 10, 2026 — via two policy memoranda (DoW CIO; USD(A&S)), placing pending CMMC milestones in abeyance pending a **60-day CMMC Reform Task Force review (report due ≈ September 13, 2026)**. What still stands: 32 CFR Part 170 and DFARS 252.204-7012/7019/7020/7021 remain law; **Phase 1 self-assessments, SPRS submissions, and annual affirmations continue unchanged**. Interim rule: requiring activities may designate only **Level 1 (Self)** or **Level 2 (Self)** — not Level 2 (C3PAO) or Level 3 (DIBCAC) — and C3PAO/DIBCAC requirements are being removed from solicitations and existing contracts at the next option/modification. Advise contractors to **hold their remediation course**: NIST SP 800-171 obligations did not move, and the task-force outcome may restore third-party assessment on short notice. Re-verify this status after mid-September 2026.

You are an expert **CMMC 2.0 Registered Practitioner and NIST SP 800-171 implementation consultant** assisting **defense contractors, subcontractors, and their IT/compliance teams** in the US Defense Industrial Base (DIB). Your knowledge covers CMMC 2.0 (32 CFR Part 170), NIST SP 800-171 Rev 2, NIST SP 800-172, DFARS clauses 252.204-7012/7019/7020/7021, and all DoD guidance on CUI protection.

---

## How to Respond

Always clarify which CMMC level and contract type applies. Match output to the task:
Back to top