Sprinto agent skills for Claude Code, Cursor and RevampKey

5 ready-made playbooks that teach an AI agent how to do real Sprinto work: which tools to call, what to check first, and when to stop and ask you.

Download RevampKey, free I have it: connect Sprinto

Connect Sprinto once and all 5 skills install themselves and stay up to date. Mac, Windows and Linux.

All 5 Sprinto skills

Each skill is one job. You ask in plain words and the agent loads the skill that matches, then follows its steps.

Start hereAsks before writing13 Sprinto tools

Use Sprinto MCP safely with AI

Connects your AI assistant to Sprinto so you can query and manage compliance records in plain English. It confirms the organisation first and asks for your explicit yes before changing anything.

Use it when

You have just connected Sprinto MCP and want to know what it can safely do.
You are about to run a Sprinto task and need to check the organisation and role first.
A Sprinto action failed and you need to know whether it is an auth, permission or partial failure.

Tools it uses

action__ADD_POLICY
action__ADD_STAFF_ROLE
action__ADD_VENDORS
action__ADD_CUSTOM_ORG_RISK_ITEM
action__ADD_BULK_ORG_RISK_ITEMS
action__APPROVE_POLICY_V2
action__APPROVE_RISK_V2
action__ADD_CONTROL_TO_AUDIT
action__ADD_CONTROL_FRAMEWORK_MAP
action__ACCESS_USER_REVIEW_ACTION
action__ASSIGN_POLICY_ACK_TO_EMPLOYEES
action__ADD_MANUAL_EVIDENCE
action__ARCHIVE_ORG_EVIDENCE_REQUEST

Example

Check which Sprinto organisation I am connected to, then list the policies waiting for approval.

You are connected to the Acme Holdings organisation. There are 7 policies waiting for approval, and I have listed them with their owners and last-updated dates. I have made no changes; if you want any of them approved, tell me which ones and I will confirm before acting.

Use in RevampKeyRead the full skill →

Asks before writing2 Sprinto tools

Coordinate user access reviews with Sprinto MCP

Finds which user access reviews are open or overdue, works out which reviewers are holding them up, and drives the review to sign-off. It asks before any change, decision or sign-off.

Use it when

Your quarterly access review is due and some reviewers have not responded
You need to know which reviews are overdue and who is blocking them
You want a review closed out cleanly without rubber-stamped decisions

Tools it uses

action__ACCESS_USER_REVIEW_ACTION
action__ADD_SYSTEM_GROUP_MEMBERSHIP

Example

Which user access reviews are overdue, and who is holding them up?

Three reviews are open and one is overdue: the AWS production review, due 3 days ago, has 14 pending lines. Dana Whitfield accounts for 9 of them, so one nudge would clear most of it. I have not sent anything. Shall I draft a reminder to Dana for your approval?

Use in RevampKeyRead the full skill →

Asks before writing4 Sprinto tools

Map controls to your compliance framework and prepare audit evidence

Finds which framework requirements lack a mapped control or evidence, then proposes mappings and audit additions for your approval before changing anything.

Use it when

Before a SOC 2 or ISO 27001 audit, to find principles with no mapped control
When a new control needs to be added to an audit's scope
When a requirement no integration can check needs manual evidence

Tools it uses

action__ADD_CONTROL_FRAMEWORK_MAP
action__ADD_CONTROL_TO_AUDIT
action__ADD_MANUAL_EVIDENCE
action__ARCHIVE_ORG_EVIDENCE_REQUEST

Example

Which SOC 2 principles have no mapped control, and what can I do about them before the audit starts?

I checked the SOC 2 principles in your Sprinto org. Two have no mapped control and one control is mapped but has no evidence attached. For the two design gaps I'd need a new control or a documented exclusion, so I've listed them rather than forcing a mapping. For the mapping gap, I propose mapping the existing access-logging control to the monitoring principle. Nothing has been changed yet; tell me which of these to apply.

Use in RevampKeyRead the full skill →

Asks before writing1 Sprinto tools

Run policy acknowledgement campaigns with AI

Assigns a policy for acknowledgement to the right people, tracks who has not signed, and escalates in tiers until everyone is accounted for. It checks the policy is approved first and asks before sending anything.

Use it when

You are publishing a new or revised policy and need every employee to accept it.
You want to know who has not yet acknowledged a policy before an audit.
You need to chase outstanding sign-offs and have evidence that the campaign closed.

Tools it uses

action__ASSIGN_POLICY_ACK_TO_EMPLOYEES

Example

Send the updated Information Security Policy to all employees and chase anyone who hasn't acknowledged it by Friday.

The Information Security Policy v3 is approved, so I can send it. The in-scope population is 47 people, excluding 2 contractors and 1 leaver. Before I send the assignment to 47 people, do you confirm? Once sent, I will track acceptance and escalate the overdue ones to their managers.

Use in RevampKeyRead the full skill →

Asks before writing4 Sprinto tools

Keep your Sprinto risk register current with AI

Triage your Sprinto risk register, draft risk statements and mitigating notes, and walk each risk through approval. It asks before adding, changing or approving anything.

Use it when

Your risk register has entries with no mitigating note before an audit
You need to add a batch of risks from a workshop and check for duplicates first
Approved risks have owners who have left and need reassigning

Tools it uses

action__ADD_CUSTOM_ORG_RISK_ITEM
action__ADD_BULK_ORG_RISK_ITEMS
action__ADD_ORG_RISK_MITIGATING_NOTE
action__APPROVE_RISK_V2

Example

Triage my risk register and tell me which risks have no mitigating note or are still unapproved.

I found 42 org risks in the register. 6 have no mitigating note, and 9 are still awaiting approval, while 2 look like duplicates of "lost or stolen laptop". I haven't changed anything yet. Should I draft mitigating notes for the 6 untreated risks so you can review the wording first?

Use in RevampKeyRead the full skill →

Get all 5 without copying a file

RevampKey adds the skills when you connect Sprinto, updates them for you and removes them when you disconnect.

Download RevampKey

How Sprinto skills work

Connect Sprinto
The Sprinto MCP server gives the agent its tools.
Ask in plain words
“Which user access reviews are overdue, and who is holding them up?” Each SKILL.md says when it applies, so only the one that fits is loaded.
Approve any change
The agent calls the tools in order, checks its work, and shows you any change before it makes it.

How to install Sprinto skills

In RevampKey the skills install themselves when you connect Sprinto. In other tools each skill is one folder with a SKILL.md file, and you also need the Sprinto MCP server connected there.

About 1 minute · nothing to copy

Download RevampKey for Mac, Windows or Linux and sign in.
Open Connectors and connect Sprinto. All 5 skills come with it and stay up to date; they go away when you remove the connector.
Ask in plain language, for example “Which user access reviews are overdue, and who is holding them up?”
Download RevampKeyConnect Sprinto · 1 click
Get RevampKey to connect Sprinto
RevampKey is a free desktop app for Mac, Windows and Linux. Install it, sign in, and Sprinto is one click away with its skills already attached.
Download RevampKey
Not now? Use the skills in your current tool
for s in essentials access-review-coordination control-audit-mapping policy-acknowledgement-campaign risk-register-maintenance; do curl -fsSL --create-dirs -o .claude/skills/sprinto-mcp-plugins-$s/SKILL.md https://revampkey.com/marketplace/sprinto-mcp-plugins/skills/$s/SKILL.md done
Other tools

Into this project’s .claude/skills folder

Connect the Sprinto MCP server in Claude Code.

Run this in your project folder to add all 5 skills:

for s in essentials access-review-coordination control-audit-mapping policy-acknowledgement-campaign risk-register-maintenance; do
  curl -fsSL --create-dirs -o .claude/skills/sprinto-mcp-plugins-$s/SKILL.md https://revampkey.com/marketplace/sprinto-mcp-plugins/skills/$s/SKILL.md
done

Ask in plain language, for example “Which user access reviews are overdue, and who is holding them up?”

Into the shared .agents/skills folder

Connect the Sprinto MCP server in Cursor.

Run this in your project folder to add all 5 skills:

for s in essentials access-review-coordination control-audit-mapping policy-acknowledgement-campaign risk-register-maintenance; do
  curl -fsSL --create-dirs -o .agents/skills/sprinto-mcp-plugins-$s/SKILL.md https://revampkey.com/marketplace/sprinto-mcp-plugins/skills/$s/SKILL.md
done

Ask in plain language, for example “Which user access reviews are overdue, and who is holding them up?”

Into the shared .agents/skills folder

Connect the Sprinto MCP server in Codex.

Run this in your project folder to add all 5 skills:

for s in essentials access-review-coordination control-audit-mapping policy-acknowledgement-campaign risk-register-maintenance; do
  curl -fsSL --create-dirs -o .agents/skills/sprinto-mcp-plugins-$s/SKILL.md https://revampkey.com/marketplace/sprinto-mcp-plugins/skills/$s/SKILL.md
done

Ask in plain language, for example “Which user access reviews are overdue, and who is holding them up?”

Into the shared .agents/skills folder

Connect the Sprinto MCP server in VS Code.

Run this in your project folder to add all 5 skills:

for s in essentials access-review-coordination control-audit-mapping policy-acknowledgement-campaign risk-register-maintenance; do
  curl -fsSL --create-dirs -o .agents/skills/sprinto-mcp-plugins-$s/SKILL.md https://revampkey.com/marketplace/sprinto-mcp-plugins/skills/$s/SKILL.md
done

Ask in plain language, for example “Which user access reviews are overdue, and who is holding them up?”

RevampKey or copy the files?

In RevampKey

One click when you connect Sprinto
Updated for you when a skill improves
Removed when you disconnect
The MCP server is set up for you
800+ other connectors, same way

Download free

Copy into your project

One command per project
Run it again to get updates
You connect the Sprinto MCP server yourself
Works in Claude Code, Cursor, Codex and VS Code

See the command

Sprinto skills FAQ

What is a Sprinto agent skill?

A SKILL.md file: a short playbook an AI agent loads when your request matches it. Each Sprinto skill describes one job, which Sprinto tools to use in which order, what to check first and when to stop and ask you.

Do the Sprinto skills change anything on their own?

The others tell the agent to show you the change and wait for a yes before it creates, edits or deletes anything in Sprinto.

Which tools can use these skills?

Any agent that reads the open Agent Skills format: Claude Code, Cursor, Codex, VS Code with Copilot and RevampKey. In RevampKey they are attached when you connect Sprinto; elsewhere you copy the folders into your project or skills directory.

Do I need the Sprinto MCP server too?

Yes. The skills tell the agent how to do the work; the Sprinto MCP server gives it the tools to do it. The Sprinto MCP setup guide covers every client.

Sprinto MCP server setup · This page as Markdown

Put Sprinto’s best workflows in your agent

Download RevampKey, connect Sprinto and ask your first question in about a minute.

Download RevampKey Connect Sprinto · 1 click

All 5 Sprinto skills

Use Sprinto MCP safely with AI

Use it when

Tools it uses

Coordinate user access reviews with Sprinto MCP

Use it when

Tools it uses

Map controls to your compliance framework and prepare audit evidence

Use it when

Tools it uses

Run policy acknowledgement campaigns with AI

Use it when

Tools it uses

Keep your Sprinto risk register current with AI

Use it when

Tools it uses

Get all 5 without copying a file

How Sprinto skills work

How to install Sprinto skills

RevampKey or copy the files?

In RevampKey

Copy into your project

Sprinto skills FAQ

Put Sprinto’s best workflows in your agent

Skills for related tools