Find the right skill

Lists every skill grouped by domain, explains the naming grammar, and points you at the best fit for what you are trying to do.

Plugin	Area	Access
drata-grc-skills	Start Here	Read-only

Purpose

Explains the three skill types: report to see where you stand, identify-gaps to get a worklist, resolve-gaps to make changes.
Lists all 18 skills by domain, marking the ones that can write.
Recommends a skill for a goal you describe in your own words — and tells you when none is needed.

Access: This skill cannot change anything in Drata.

MCP tools used

MCP tool	Level	OAuth scope
Get Company	Read	`read:company`

This skill uses every scope listed above; without them it fails partway through. What any tool returns is bounded by your Drata role as well as the scope — see MCP Server setup.

Run it

Copy

Copied

/plugin marketplace add drata/drata-claude-plugin
/plugin install drata-grc-skills@drata

Then run the skill by name:

Copy

Copied

/drata-grc-skills:drata-help

Or ask for it in your own words:

"what can this plugin do"
"which skill should I use"

Before you start

Connect the Drata MCP server. See MCP Server setup.
Your MCP OAuth configuration must grant the scopes behind the tools listed above.

Related skills

What needs attention today — A cross-domain briefing of everything needing attention right now — failing controls and tests, high open risks, expired evidence, overdue vendor reviews, non-compliant personnel.