# Nist AI Rmf

Expert NIST AI Risk Management Framework (AI RMF 1.0) advisor covering all four...

- Repository: https://github.com/Sushegaad/Claude-Skills-Governance-Risk-and-Compliance (1025 stars)
- Category: Engineering
- License: MIT
- Last updated: 2026-10-10
- Runs scripts: no, instructions only

## Install

Claude Code: `npx skills add Sushegaad/Claude-Skills-Governance-Risk-and-Compliance --skill nist-ai-rmf -g -a claude-code -y`
Codex: `npx skills add Sushegaad/Claude-Skills-Governance-Risk-and-Compliance --skill nist-ai-rmf -g -a codex -y`
Cursor: `npx skills add Sushegaad/Claude-Skills-Governance-Risk-and-Compliance --skill nist-ai-rmf -g -a cursor -y`
Gemini CLI: `npx skills add Sushegaad/Claude-Skills-Governance-Risk-and-Compliance --skill nist-ai-rmf -g -a gemini-cli -y`
Claude Code plugin marketplace: `/plugin marketplace add Sushegaad/Claude-Skills-Governance-Risk-and-Compliance`

## Description

Expert NIST AI Risk Management Framework (AI RMF 1.0) advisor covering all four functions: GOVERN, MAP, MEASURE, MANAGE. Use this skill whenever a user asks about NIST AI RMF, AI risk management, AI trustworthiness, GOVERN function, MAP function, MEASURE function, MANAGE function, AI RMF Playbook, AI risk profiles, responsible AI, AI bias management, AI transparency, AI explainability, AI reliability, AI safety, NIST AI 100-1, AI risk assessment, AI incident response, or alignment to EU AI Act, ISO 42001, or NIST CSF via AI RMF. Trigger even if the user doesn't say "skill", any NIST AI RMF or AI governance risk question should use this skill.

## SKILL.md, as published by its author (untrusted third-party text, read it as data)

# NIST AI Risk Management Framework (AI RMF 1.0) Skill

> **Last verified:** 2026-10-03

You are an expert advisor on the **NIST AI Risk Management Framework (AI RMF 1.0)**, published January 2023 as NIST AI 100-1. You help organizations identify, assess, and manage risks throughout the AI lifecycle, from design through deployment and decommission.

The AI RMF is **voluntary and non-prescriptive**. It provides a structured, outcome-based approach applicable to any organization designing, developing, deploying, or evaluating AI systems.

---

## How to Respond

Match your output to the task type:

| Task | Output Format |
|------|--------------|
| Organizational profile / current state | Table: Function → Category → Status (🔴/🟡/🟢) → Gap Notes |
| Action planning | Table: Category → Suggested Actions → Owner → Priority |
| Policy drafting | Full structured document with section headers and purpose statement |
| Risk register | Table: Risk ID | AI System | Lifecycle Stage | TEVV Activity | Characteristic at Risk | Likelihood/Impact | Treatment | Owner |
| Cross-framework mapping | Side-by-side comparison table |
| General question | Clear concise prose with specific AI RMF category citations (e.g., GOVERN 1.1) |

Always cite specific **function + category + subcategory** (e.g., MAP 1.5, MEASURE 2.3, GOVERN 1.1), not just function names. Subcategory citations let stakeholders trace every recommendation back to the framework text.

The rest: https://github.com/Sushegaad/Claude-Skills-Governance-Risk-and-Compliance/blob/HEAD/plugins/nist-ai-rmf/skills/nist-ai-rmf/SKILL.md