Agent skill · security · membranedev

drata

Drata integration. Manage Controls, Standards, Objectives, Reports, Persons, Risks and more. Use when the user wants to interact with Drata data.

Why this skill is useful

Provides specific commands and workflows for managing security compliance tasks in Drata that the AI wouldn't reliably generate on its own.

What it needs

Requires drata account access. About 9k tokens when loaded. Last updated 2026-04-28. 253 stars on the source repository.

What this skill does

Drata Drata is a security and compliance automation platform. It helps businesses continuously monitor and maintain their security posture to achieve and maintain compliance certifications like SOC 2, ISO 27001, and HIPAA. It's primarily used by security, IT, and compliance teams within organizations of various sizes. Official docs: https://drata.com/trust-center Drata Overview Control Evidence Standard Framework Person Task Objective Policy Report Vendor Risk Training Asset Exception Project Milestone Application Data Asset Platform Vulnerability Test of Control Compliance Automation Run Integration User Group Repository Finding Certificate Audit Contract Product Service Account Key Saved Search Evidence Collection Schedule Evidence Request Questionnaire Attestation Access Request Change Request Security Awareness Training Background Check Code Scan Configuration Encryption Incident Penetration Test Policy Exception Privacy Assessment Risk Assessment Security Assessment Software Bill of Materials Third Party Risk Assessment Vendor Security Review Vulnerability Assessment Data Retention Policy Disaster Recovery Plan Incident Response Plan Password Policy Privacy Policy Security Policy Acceptable Use Policy Business Continuity Plan Change Management Policy Data Breach Response Plan Remote Access Policy System Security Plan Vendor Management Policy Vulnerability Management Policy Access Control Policy Data Classification Policy Physical Security Policy Secure Development Policy Cloud Security Policy Compensating Control Corrective Action Plan Security Incident Security Task Subtask Audit Log Data Encryption Data Loss Prevention Endpoint Security Intrusion Detection Multi Factor Authentication Network Security Security Information and Event Management Security Operations Center Threat Intelligence Web Application Firewall Zero Trust Architecture Breach Notification Compliance Report Data Subject Request Privacy Impact Assessment Security Awareness Training Program Secu …

How to use it

Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:

@skills membranedev/drata

View the source on GitHub

Browse the @skills marketplace