# Drata agent skills for Claude Code, Cursor and RevampKey

> Ready-made Drata playbooks for AI agents: find evidence gaps against your Drata framework before the audit, audit personnel compliance in Drata with AI, review your Drata risk register with AI. Free SKILL.md files for Claude Code, Cursor and Codex, or one click in RevampKey.

## Skills

- [Use the Drata connector safely](https://revampkey.com/marketplace/drata/skills/essentials.md): Confirms the workspace and region, explains what your role and scopes allow, and asks for explicit approval before any change to your compliance records.
- [Find evidence gaps against your Drata framework before the audit](https://revampkey.com/marketplace/drata/skills/evidence-gap-review.md): Starts from a chosen framework's requirements, checks each against linked and current evidence in Drata, and returns a read-only gap list ranked by audit risk. It asks before changing anything.
- [Audit personnel compliance in Drata with AI](https://revampkey.com/marketplace/drata/skills/personnel-compliance-audit.md): Finds people with overdue training, missing offboarding evidence or failing devices in Drata, and summarises who needs action and who owns it. Read-only; it asks before uploading documents or changing any employment record.
- [Review your Drata risk register with AI](https://revampkey.com/marketplace/drata/skills/risk-register-review.md): Reviews a Drata risk register for untreated, unowned and stale risks, then drafts a prioritised summary for your risk committee. It only reads; it asks before creating any risk.
- [Triage vendor risk in Drata with AI](https://revampkey.com/marketplace/drata/skills/vendor-risk-triage.md): Reviews your Drata vendor inventory and security reviews, then ranks third parties with missing documents, unreviewed high-risk vendors or no owner into a prioritised follow-up list. Read-only: it changes nothing in Drata.

## Install

- RevampKey: connect Drata at https://revampkey.com/marketplace/drata; the skills come with it.
- Any Agent Skills tool, into the current project:

```bash
for s in essentials evidence-gap-review personnel-compliance-audit risk-register-review vendor-risk-triage; do
  curl -fsSL --create-dirs -o .agents/skills/drata-$s/SKILL.md https://revampkey.com/marketplace/drata/skills/$s/SKILL.md
done
```

### What is a Drata agent skill?

A SKILL.md file: a short playbook an AI agent loads when your request matches it. Each Drata skill describes one job, which Drata tools to use in which order, what to check first and when to stop and ask you.

### Do the Drata skills change anything on their own?

3 of the 5 only read. The others tell the agent to show you the change and wait for a yes before it creates, edits or deletes anything in Drata.

### Which tools can use these skills?

Any agent that reads the open Agent Skills format: Claude Code, Cursor, Codex, VS Code with Copilot and RevampKey. In RevampKey they are attached when you connect Drata; elsewhere you copy the folders into your project or skills directory.

### Do I need the Drata MCP server too?

Yes. The skills tell the agent how to do the work; the Drata MCP server gives it the tools to do it. The Drata MCP setup guide covers every client.

MCP setup guide: https://revampkey.com/marketplace/drata.md