control-lookup
Installation
SKILL.md
Control Lookup
When a user provides a control ID, a control name, or a plain-language description of a control objective, identify it, return its full details, and map it across ISO 27001, NIST CSF, PCI-DSS v4, and OWASP (Top 10 / ASVS).
Step 1 — Parse the Input
Accept any of the following input forms:
| Input form | Example |
|---|---|
| Control ID — ISO 27001 | A.8.2, A.9.1.1, 5.15 (2022 notation) |
| Control ID — NIST CSF | PR.AC-1, DE.CM-7, ID.AM-2, GV.OC-01 (CSF 2.0) |
| Control ID — PCI-DSS v4 | Req 7.1.2, 10.2.1, 6.3 |
| Control ID — OWASP Top 10 | A01:2021, A03:2021 |
| Control ID — OWASP ASVS | V2.1.1, V4.3.2, V7.1.1 |
| Control name or keyword | "least privilege", "patch management", "MFA", "encryption at rest", "injection" |
| Plain-language objective | "access should be revoked when an employee leaves" |
If the input is ambiguous (e.g., "Control 5" could be ISO 27001 clause 5 or NIST CSF category), list all candidates and ask the user to confirm before proceeding.