CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

swift-csp

Expert SWIFT Customer Security Programme (CSP) advisor covering the Customer Security Controls Framework (CSCF v2026). Use this skill whenever a user asks about SWIFT CSP, CSCF controls, SWIFT security attestation, KYC-SA portal, SWIFT architecture types (A1/A2/A3/A4/B), mandatory vs advisory controls, independent assessment, SWIFT secure zone, secure flow zone, MFA for operators, SWIFT messaging security, payment fraud prevention on SWIFT, gap analysis for CSCF, or compliance with SWIFT's 32 controls (26 mandatory, 6 advisory in v2026) across the three objectives: Secure Your Environment, Know and Limit Access, Detect and Respond. Control 2.4 (Back-Office Data Flow Security) is now mandatory in v2026. v2026 attestation window is July 1– December 31, 2026. Trigger for any SWIFT CSP or CSCF compliance question.

Quality

81%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Passed

No findings from the security scan

SKILL.md
Quality
Evals
Security

Quality

Content

71%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A well-structured compliance knowledge skill with strong progressive disclosure and actionable, task-mapped guidance. Its main weaknesses are redundancy around the Control 2.4 change and inlined time-sensitive dates/details that could be consolidated into the reference files.

Suggestions

State the Control 2.4 mandatory promotion once (e.g., in the control summary table and its dedicated section) and remove the repetitions from the overview table row, warning block, Key Priorities, and Common Findings entries.

Consolidate the duplicated counts ('26 mandatory + 6 advisory', attestation window dates) into a single Framework Overview mention and cut the rest to reduce token load and version-drift risk.

Resolve the internal inconsistency between 'CSCF v2027 publication expected July 2026' in the overview and timeline tables and the Current Status section's 'no public confirmation as of September 14, 2026; do not assert v2027 content', keeping only the verified guidance.

DimensionReasoningScore

Conciseness

Mostly efficient tables, but the Control 2.4 mandatory-promotion message is repeated in 5+ places (overview row, warning block, dedicated section, priorities, common findings) and '26 Mandatory + 6 Advisory' recurs ~4 times; time-sensitive dates are inlined rather than quarantined, matching anchor 3 ('could be tightened').

3 / 5

Actionability

Concrete, executable guidance for an instruction-only skill: specific remediation steps ('Implement TLS 1.2+ with certificate-based mutual authentication', 'firewall rules restricting back-office access to named IP addresses/ports only'), a task-to-output-format contract, and 'Always cite the specific control number ... not just the control name'; minor gaps such as no inline example of a gap-assessment output.

4 / 5

Workflow Clarity

A clear sequencing gate ('Critical scoping step: Before assessing any control, confirm which architecture type applies'), a numbered 5-step 2.4 remediation, and verification cautions ('Do not assert v2027 content; advise checking the Knowledge Centre', 'Verify current PMO guidance'), but no explicit validation checkpoints on produced outputs.

4 / 5

Progressive Disclosure

Clear overview body with two well-signaled, one-level-deep references (both verified to exist on disk), each annotated with its contents, no nested references, and appropriate splitting — full control requirements live in references/swift-controls.md while only the summary table is inline.

5 / 5

Total

16

/

20

Passed

Description

81%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong description with excellent trigger coverage and a well-defined niche. The main weakness is that capabilities are framed as a role ('expert advisor covering...') rather than as a list of concrete actions the skill performs.

DimensionReasoningScore

Specificity

Names the SWIFT CSP/CSCF domain in concrete detail and gestures at tasks (gap analysis, attestation, compliance), but the 'what' is role-based ('Expert ... advisor covering the framework') rather than a list of concrete actions, matching anchor 3 rather than 4.

3 / 5

Completeness

Both 'what' (advisor covering CSCF v2026) and an explicit 'when' ('Use this skill whenever a user asks about...', 'Trigger for any SWIFT CSP or CSCF compliance question') are present, but the 'what' is less concrete than the anchor-5 standard, so it fits anchor 4.

4 / 5

Trigger Term Quality

Comprehensive natural-phrases users would actually say — 'SWIFT CSP', 'CSCF controls', 'KYC-SA portal', 'MFA for operators', 'gap analysis for CSCF', 'payment fraud prevention on SWIFT' — covering acronyms, synonyms, and specific portal/tool names.

5 / 5

Distinctiveness Conflict Risk

A clear niche (SWIFT CSP/CSCF compliance) with distinct triggers like 'KYC-SA portal' and 'SWIFT secure zone' that no generic security or compliance skill would claim, so conflict risk is minimal.

5 / 5

Total

17

/

20

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 16 / 16 Passed

Validation for skill structure

No warnings or errors.

Repository

Sushegaad/Claude-Skills-Governance-Risk-and-Compliance

Path

plugins/swift-csp/skills/swift-csp/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.