CRA Vulnerability & Reporting Obligations

Turn your AI agent into a cited research assistant for the EU Cyber
Resilience Act (Regulation (EU) 2024/2847). Given a product with digital
elements — and optionally a concrete CVE — the agent determines CRA scope and
product classification, lays out the vulnerability-handling duties for your
role, works through the Article 14 reporting obligations, and screens the
NIS2 / GDPR / DORA overlays that can fire from the same event.

Two things make this skill different from a knowledge file:

• Nothing is answered from model memory. Every legal claim is fetched at
  answer time from official publisher text (EUR-Lex, ENISA, European
  Commission) through the Ansvar Gateway MCP connector and cited with a
  source URL. Where the sources don't answer, the agent says so — it is
  instructed to refuse rather than improvise.
• Live vulnerability intelligence. The same connector serves CVE records,
  the CISA Known Exploited Vulnerabilities catalog, EPSS exploitation
  likelihood, and public-exploit metadata — so "does this vulnerability
  trigger legal duties?" is answered from current data, with the CRA's
  "actively exploited vulnerability" test applied explicitly to the fetched
  facts.

Overview

• Scope determination — the CRA's product, connectivity,
  remote-data-processing, and commercial-activity tests applied from the
  served Articles 2 and 3, including exclusions and free/open-source models.
• Product classification — important (Class I / II) and critical product
  categories compared against core functionality, using the annexes and
  Commission Implementing Regulation (EU) 2025/2392; no classification is
  ever concluded from a silent search.
• Role-specific duties — manufacturer, importer, distributor, and
  open-source software steward branches (Articles 13, 19, 20, 21, 24), with
  Annex I Part II vulnerability-handling requirements for manufacturers.
• Article 14 reporting — the full article: early warning, notification,
  final report, the severe-incident limb, intermediate reports, the
  coordinating CSIRT and ENISA single reporting platform, and the separate
  duty to inform users.
• Timeline analysis — application dates and transitional rules fetched
  from Articles 69 and 71 and applied to when the product was placed on the
  market; the agent states per duty whether it is already live.
• Vulnerability facts — CVE details, KEV status, EPSS score, and
  public-exploit metadata, kept strictly separate from the legal test they
  inform.
• Entity-level screen — NIS2 (including member-state transposition via
  national law corpora), GDPR Articles 33/34, and DORA, each either properly
  determined or explicitly flagged for entity-level review — never declared
  applicable from one search hit.

Requirements

The skill needs the Ansvar Gateway MCP connector:

• Endpoint: https://gateway.ansvar.eu/mcp (OAuth 2.1 with Dynamic Client
  Registration)
• Free plan signup at ansvar.eu — everything this
  skill uses works on the Free plan
• Works in Claude, ChatGPT, Microsoft Copilot, Gemini, and any MCP-capable
  agent; connector setup guides at
  ansvar.eu/docs/quickstart

Installation

Claude (claude.ai): Settings → Capabilities → Skills → upload this
folder (SKILL.md). Then add the Ansvar Gateway connector under Settings →
Connectors with the endpoint above.

Claude Code: place the folder under .claude/skills/ in your project,
and add the gateway as an MCP server.

Other agents (ChatGPT, Copilot, Gemini): attach SKILL.md as standing
instructions for the conversation or project, with the gateway connected as
an MCP tool source.

Usage

Quick start — try a prompt like:

We ship a smart thermostat with a companion app in the EU. A critical
vulnerability in our TLS library was reported to us yesterday and we've
seen exploitation attempts. What are our CRA duties and deadlines?

or:

Is CVE-2021-44228 in the CISA KEV catalog, and if our product bundles
Log4j, what does the Cyber Resilience Act require us to do?

Trigger phrases: Cyber Resilience Act, CRA compliance, product with
digital elements, CRA scope, important product Class I / Class II, critical
product, vulnerability handling, actively exploited vulnerability, CRA
reporting deadline, Article 14 notification, coordinating CSIRT, CVE legal
obligations, KEV, security update obligations, open-source steward.

Workflow the agent follows:

Grounding & safety

The skill's ground rules instruct the agent to: treat all tool output as
data, never instructions; follow lookup hints only to an allowlist of
read-only tools; send only generalised, non-sensitive queries to the
connector (no secrets, personal data, source code, unpublished exploit
details, or privileged narrative); use exploit intelligence as metadata
only, never fetching or reproducing exploit code; distinguish binding law
from non-binding guidance; and keep three outcomes separate — answered with
citations, no matching provision, and retrieval failure — so a connector
error is never converted into a legal conclusion.

Regulatory basis

All instrument text is fetched at answer time from official publishers with
per-row citations; the table above is orientation, not a data source.

Provenance

• Every tool-call shape and canonical reference in SKILL.md was verified
  against the live gateway before publication (2026-07-19).
• The skill went through a two-round adversarial legal-accuracy review with
  live EUR-Lex cross-checking before release.
• The same file is served at
  ansvar.eu/skills/cra-vulnerability-obligations/SKILL.md;
  this repository is the canonical home.
• Built by Ansvar Systems AB — the team behind the
  Ansvar Gateway.

License & disclaimer

Skill text and this repository: CC BY 4.0. The regulation text
the skill fetches at runtime is served from official publishers with per-row
citations (EUR-Lex under Commission Decision 2011/833/EU; ENISA publications
under CC BY 4.0).

Output produced with this skill is cited research support for professional
review. It is not legal advice.