DocsIntegrations

ZEP skill packs for AI control tests

Updated 2026-09-15

By Adam Swenson · 15 September 2026

A skill pack teaches your AI assistant how to run one family of Zovos control tests correctly. It covers what the objective is, how to sample, and what raw evidence to capture. It also covers the anti-fabrication and credential/PII/SAR rules, and exactly how to submit with the Zovos Evidence Protocol tools. Load the pack for the control you are testing, then follow Test controls with your own AI assistant.

Each family ships the same content in three formats, so it drops into whichever assistant you use. The formats are a Claude skill (SKILL.md), GitHub Copilot instructions, and a Cursor rule (.mdc).

  • Claude (skills). Save the family's SKILL.md into your project's skills directory, or attach it to the conversation. Claude reads its front-matter and applies it when a matching control is due.
  • GitHub Copilot. Save copilot-instructions.md as .github/copilot-instructions.md in the repository (or workspace) you test from. Copilot applies it automatically.
  • Cursor. Drop the .mdc file into .cursor/rules/ in your project. It is authored with alwaysApply: false, so invoke it by name or reference when you start a test.

With the local bridge you can also print any pack on demand with its bundle_skill helper instead of downloading it.

Control familyPrimary objectiveMethodClaude skillCopilotCursor
Access reviewAC-2 Account ManagementTESTSKILL.mdCopilotCursor
Asset inventoryCIS-1 Inventory and Control of Enterprise AssetsTESTSKILL.mdCopilotCursor
Security awareness trainingAT-2 Security Awareness TrainingEXAMINESKILL.mdCopilotCursor
Backup and restoreCP-9 System BackupTESTSKILL.mdCopilotCursor
Business continuityFFIEC-BCM Business Continuity ManagementEXAMINESKILL.mdCopilotCursor
Change managementFFIEC-DAM Development, Acquisition, and MaintenanceEXAMINESKILL.mdCopilotCursor
Configuration baselineCIS-4 Secure ConfigurationTESTSKILL.mdCopilotCursor
Data protectionSC-28 Protection of Information at RestTESTSKILL.mdCopilotCursor
Governance programFFIEC-IS Information Security ProgramEXAMINESKILL.mdCopilotCursor
Incident responseIR-8 Incident Response PlanEXAMINESKILL.mdCopilotCursor
Internal auditFFIEC-AUD IT Audit FunctionEXAMINESKILL.mdCopilotCursor
Logging and monitoringAU-2 Event LoggingTESTSKILL.mdCopilotCursor
MFA on privileged accountsIA-2 User Identification and AuthenticationTESTSKILL.mdCopilotCursor
Network boundarySC-7 Boundary ProtectionTESTSKILL.mdCopilotCursor
Risk assessmentRA-3 Risk AssessmentEXAMINESKILL.mdCopilotCursor
Vendor / SOC reviewSA-9 External System ServicesEXAMINESKILL.mdCopilotCursor
Vulnerability managementRA-5 Vulnerability ScanningTESTSKILL.mdCopilotCursor