Drata GRC Assistant — 17 job-to-be-done skills plus a built-in help index (drata-help) over the Drata MCP, spanning audit readiness, controls, evidence, risk, third-party/vendor risk, workforce compliance, and stakeholder reporting.
Every skill is named for the job: report to see it, identify-gaps to find what needs work, resolve-gaps to change it. Bring your own agent (your AI, your AI, Cursor, Copilot).
Skills 18 in the Claude listing
Drata all identify gaps The 30-second cross-domain briefing: everything needing attention now — failing controls and tests, high open risks, expired evidence, overdue vendor reviews, non-compliant personnel — as counts plus Drata control identify gaps Two worklists over the not-ready controls in a workspace - controls with nothing mapped (no evidence, policy or monitor), and controls whose manual evidence is not current - plus a metadata pass over Drata control report Three charts on control readiness for a workspace: the control library split in scope vs out of scope, what share of in-scope controls are ready, and a breakdown of the not-ready ones by cause - test Drata control resolve gaps Guided control fixes from one flat menu with live counts — nothing mapped, missing a policy, evidence not current, tests failing, key info missing — pick a gap, answer one question, confirm one previe Drata evidence identify gaps Read the evidence library once and split it into four workable buckets — needs artifact (by framework), automated evidence whose test is failing, renewal overdue, renewal due soon — plus callouts for Drata evidence report A read-only snapshot of how fresh the evidence library is for a workspace: the share that is Valid versus Needs-artifact, Expiring soon, and Expired, plus why evidence goes stale - renewal cadence (ho Drata evidence resolve gaps Guided evidence fixes from one flat menu with live counts — no artifact, automated failing, renewal overdue, no control mapped, key info missing — pick a gap, answer one question, confirm one previewe Drata executive report The stakeholder briefing: board, executive, audit-committee, or QBR view of live posture — headline metrics, framework readiness, top risks — single workspace or org roll-up with per-workspace scoreca Drata framework report Answer 'how ready is a given workspace for framework X?' — asks workspace first, then which in-scope framework (auto-selecting when only one of either exists), then reports framework readiness % with Drata help The catalog and router: explains the report / identify-gaps / resolve-gaps grammar, lists all 18 skills grouped by domain with write markers, and points to the best-fit skill for a goal — plus what ne Drata monitoring report The monitoring dashboard for a workspace, chart-led with no tables and using Drata's own terms: test status (Enabled vs Disabled), test results (Passed, Failed, Error), days failing and failures by ch Drata personnel report The workforce compliance report: pass / fail / excluded per check as stacked bars, split by employee vs contractor and by department, plus onboarding time-to-compliance and offboarding ageing. Drata risk identify gaps The risk action queue: only risks where the record is incomplete or contradictory and someone owes an edit — untreated, unowned, unscored, no residual, no reduction, residual above inherent, overdue o Drata risk report The visual risk dashboard: KPI cards, 5×5 likelihood × impact heat map, treatment status as a stacked bar per register, risk categories showing what treatment removed and what remains, plus owner conc Drata risk resolve gaps Guided risk fixes from one flat menu with live counts — untreated, no owner, not scored, residual missing or wrong, treatment date passed or missing — pick a gap, answer one question, confirm one prev Drata vendor identify gaps The vendor action queue. Drata vendor report The vendor portfolio dashboard (account-scoped), chart-led and high-level: portfolio composition (current / prospective / archived), assessment coverage, an inherent x residual grid, a category donut, Drata vendor resolve gaps Guided vendor fixes from one flat menu with live counts — key info missing (owner/business unit), review overdue (chase), on hold, no renewal schedule — pick a gap, answer one question, confirm one pr 