New: 97,000+ skills indexed from GitHub repos with 100+ stars · every skill safety-checkedBrowse top skillsTop skills
Esc to closeBrowse all skills
Submit a skillBrowse skills
Submit a skillBrowse skills

Agent skill

Classification Framework Enforcement

by Hack23 in Hack23/cia

Data classification enforcement, sensitivity labeling, and handling controls per classification level for the CIA platform

Apache-2.0Auto-check passedBackend & APIs

Install Classification Framework Enforcement

skills CLI
$ npx skills add Hack23/cia --skill classification-framework-enforcement -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI
$ gh skill install Hack23/cia classification-framework-enforcement --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy
$ git clone --depth 1 https://github.com/Hack23/cia.git skills-src && mkdir -p .claude/skills && cp -r skills-src/.github/skills/classification-framework-enforcement .claude/skills/classification-framework-enforcement && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Facts

Skill name
classification-framework-enforcement
GitHub stars
239
Token cost
~2k tokens
SKILL.md length
547 words
Files
1
Skills in repo
78
Repo updated
First seen
Licence
Apache-2.0

At a glance

Data classification enforcement, sensitivity labeling, and handling controls per classification level for the CIA platform

  • Backend & APIs work in your project
  • SKILL.md covers Purpose, When to Use This Skill, Classification Levels and Handling Controls by…, plus 4 more sections
  • Instructions only: no scripts, shell commands, URLs or credentials in SKILL.md

What it does

Classification Framework Enforcement is an agent skill from Hack23/cia. Data classification enforcement, sensitivity labeling, and handling controls per classification level for the CIA platform

Its SKILL.md is about 2k tokens, which your agent loads only when the skill is triggered. It is a single SKILL.md file with no bundled scripts.

It sits in Backend & APIs. The repository describes itself as: Citizen Intelligence Agency. Open-source intelligence platform analyzing Swedish political activities using AI and data visualization. Tracks politicians, government… The licence is Apache-2.0.

When your agent uses it

  • Backend & APIs work in your project

Example prompts

  • “/classification-framework-enforcement”

What it can do on your machine

Read from SKILL.md and the folder at commit 6a9797b. It shows what the files ask for, not the result of running them.

  • Tool permissions

    Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.

    From allowed-tools in the SKILL.md frontmatter.

  • Runs code

    No scripts in the folder and no shell commands in SKILL.md (its code samples are java).

    From the folder's file list and the shell code blocks in SKILL.md.

  • Network

    Links to these hosts (documentation or services it may open):

    • iso.org
    • csrc.nist.gov
    • gdpr-info.eu
    • github.com

    From URLs in SKILL.md, links to its own repository left out.

  • Credentials

    Names no API keys, tokens, secrets or passwords.

    From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

Classification Framework Enforcement loads about 2k tokens when it runs. Until then it costs about 40 tokens; SKILL.md has 547 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it
~40
When it runs · the whole SKILL.md, loaded when a task matches
~2k

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check passed

The automated check found no risky patterns in SKILL.md.

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.

SKILL.md

The full file from Hack23/cia at commit 6a9797b, republished under its Apache-2.0 licence (© Hack23). 547 words, ~1,962 tokens.

Download SKILL.mdSave it as .claude/skills/classification-framework-enforcement/SKILL.md (or your agent's skills folder).
name
classification-framework-enforcement
description
Data classification enforcement, sensitivity labeling, and handling controls per classification level for the CIA platform
license
Apache-2.0

Classification Framework Enforcement Skill

Purpose

This skill provides guidance for enforcing data classification across the Citizen Intelligence Agency platform. It defines classification levels, sensitivity labeling requirements, and mandatory handling controls for each level to ensure consistent data protection aligned with ISMS requirements.

When to Use This Skill

Apply this skill when:

  • ✅ Designing new data models or database tables
  • ✅ Implementing features that process or display data
  • ✅ Reviewing code that handles user data or PII
  • ✅ Configuring logging, caching, or data export
  • ✅ Assessing data flows between system components
  • ✅ Integrating with external data sources
  • ✅ Conducting data protection impact assessments

Do NOT use for:

  • ❌ Access control implementation (use access-control-policy)
  • ❌ Encryption algorithm selection (use crypto-best-practices)
  • ❌ Incident response procedures (use incident-response)

Classification Levels

CIA Platform Data Classification
LevelLabelDescriptionExamples in CIA
Public🟢 PUBLICFreely available informationPublished Riksdag votes, public politician profiles, World Bank indicators
Internal🟡 INTERNALFor authorized users onlyAggregated analytics, risk scores, trend analysis
Confidential🟠 CONFIDENTIALRestricted access, business-sensitiveUser accounts, email addresses, session data
Restricted🔴 RESTRICTEDHighest protection, regulatory requirementsPasswords, API keys, encryption keys, GDPR-protected PII
Classification Decision Tree
New Data Element
    │
    ├─→ Is it publicly available from source?
    │   ├─→ YES → Is it aggregated/analyzed by CIA?
    │   │   ├─→ YES → 🟡 INTERNAL
    │   │   └─→ NO  → 🟢 PUBLIC
    │   └─→ NO
    │
    ├─→ Is it user-provided personal data?
    │   ├─→ YES → Is it authentication/credential data?
    │   │   ├─→ YES → 🔴 RESTRICTED
    │   │   └─→ NO  → 🟠 CONFIDENTIAL
    │   └─→ NO
    │
    ├─→ Is it a system secret (key, token, password)?
    │   ├─→ YES → 🔴 RESTRICTED
    │   └─→ NO
    │
    └─→ Is it internal analysis or derived data?
        ├─→ YES → 🟡 INTERNAL
        └─→ NO  → 🟢 PUBLIC (default to least restrictive only if certain)

Handling Controls by Classification Level

🟢 PUBLIC Data
ControlRequirement
StorageStandard database storage
TransmissionHTTPS preferred but not mandatory for read-only
LoggingCan be logged freely
CachingCan be cached without restrictions
DisplayNo restrictions on UI display
ExportCan be exported freely
RetentionFollow data source policies
BackupStandard backup procedures
🟡 INTERNAL Data
ControlRequirement
StorageStandard database with access controls
TransmissionHTTPS required
LoggingCan be logged, no sensitive aggregation details
CachingCan be cached with TTL limits
DisplayRequires authenticated session
ExportRequires authentication
Retention1 year default, review annually
BackupStandard backup with access controls
🟠 CONFIDENTIAL Data
ControlRequirement
StorageEncrypted at rest (AES-256)
TransmissionTLS 1.2+ required
LoggingNever log confidential field values
CachingIn-memory only, short TTL, no disk cache
DisplayMasked by default, reveal on explicit action
ExportRestricted, requires authorization
RetentionMinimum necessary, max 3 years
BackupEncrypted backup, restricted access
AccessRole-based, principle of least privilege
Show full SKILL.md (213 more words)Show less
🔴 RESTRICTED Data
ControlRequirement
StorageEncrypted at rest + application-level encryption
TransmissionTLS 1.2+ with certificate validation
LoggingAbsolutely never log — not even existence
CachingNever cache
DisplayNever display in plaintext
ExportProhibited without explicit authorization
RetentionMinimum necessary, auto-expire where possible
BackupEncrypted, separate access controls
AccessStrict need-to-know, multi-factor authentication
Key ManagementHSM or AWS KMS, regular rotation

Implementation Patterns

Database Column Classification
java
@Entity
@Table(name = "application_user")
public class ApplicationUser {

    @Column(name = "username")
    // Classification: CONFIDENTIAL — user-provided, non-public
    private String username;

    @Column(name = "email")
    // Classification: CONFIDENTIAL — PII under GDPR
    private String email;

    @Column(name = "password_hash")
    // Classification: RESTRICTED — credential data
    private String passwordHash;
}
Logging Guard
java
// DO: Log classification-safe data only
log.info("Processing politician data for id: {}", politicianId);  // PUBLIC id

// DON'T: Log CONFIDENTIAL or RESTRICTED data
// log.info("User login: email={}, password={}", email, password);

// DO: Use placeholder for CONFIDENTIAL data
log.info("User action completed for user id: {}", userId);
Caching Rules
java
// PUBLIC/INTERNAL: Standard caching allowed
@Cacheable(value = "politicians", key = "#id")
public Politician findPoliticianById(String id) { ... }

// CONFIDENTIAL: Short TTL, in-memory only
@Cacheable(value = "userProfiles", key = "#userId",
    cacheManager = "shortLivedCacheManager")
public UserProfile findUserProfile(String userId) { ... }

// RESTRICTED: Never cache
// No @Cacheable annotation — always fetch from secure storage
public String getApiKey(String serviceId) { ... }

Data Flow Classification

CIA Platform Data Flows
External APIs (Riksdag, World Bank) ──→ Service Layer ──→ Database
    🟢 PUBLIC data                      Classification    Labeled
                                        enforcement       storage
                                            │
                                            ▼
User Browser ◄──── Vaadin UI ◄──── Service Layer
    Display           Encoding        Access control
    controls          applied         enforced
Cross-Boundary Rules
From → ToAllowed ClassificationsControls Required
External API → ServicePUBLICInput validation
Service → DatabaseAllEncryption for CONFIDENTIAL+
Database → ServiceAllAccess control check
Service → UIPUBLIC, INTERNAL, CONFIDENTIALOutput encoding, masking
Service → LogsPUBLIC, INTERNAL onlyNever log CONFIDENTIAL+
Service → CachePUBLIC, INTERNAL, Confidential (short TTL)Never cache RESTRICTED
Any → ExternalPUBLIC onlyData export review

Compliance Mapping

Classification ControlISO 27001NIST CSFGDPR
Data ClassificationA.5.12, A.5.13ID.AM-5Art. 5(1)(f)
LabelingA.5.13PR.DS-3Art. 30
Access ControlA.5.15, A.8.3PR.AC-4Art. 25
EncryptionA.8.24PR.DS-1Art. 32
Logging ControlsA.8.15DE.AE-3Art. 30
RetentionA.5.33PR.IP-6Art. 5(1)(e)
Data TransferA.5.14PR.DS-2Art. 44-49

References

© Hack23, Apache-2.0. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file

Files

Just SKILL.md in .github/skills/classification-framework-enforcement of Hack23/cia.

Open the folder on GitHubat commit 6a9797b

Compare with similar skills

Classification Framework Enforcement next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

Classification Framework Enforcement compared with similar skills
SkillStarsUsed inTokensAuto-checkLicenceRepo updated
Classification Framework Enforcement this skillHack23/cia239—~2kAutomated safety check: PassApache-2.0
Configuring Horizoncoollabsio/coolify63k4 repos~898Automated safety check: PassMIT
Nestjs Best Practicesrolling-scopes/rsschool-app10k6 repos~1.2kAutomated safety check: PassMIT
Sub2API AdminWei-Shaw/sub2api43k1 repos~717Automated safety check: PassLGPL-3.0
Firecrawl Build Onboardingfirecrawl/firecrawl189k1 repos~1.4kAutomated safety check: NotesISC
Obsidian BasesAtmosphere/atmosphere3.8k22 repos~3.2kAutomated safety check: PassApache-2.0

Similar skills

  • Configuring Horizon

    coollabsio/coolify

    A skill your agent uses whenever the user mentions Horizon by name in a Laravel context.

    63k GitHub starsUsed in 4 repos~898 tokens
    Backend & APIsAuto-check passed

  • Nestjs Best Practices

    rolling-scopes/rsschool-app

    NestJS best practices and architecture patterns for building production-ready applications.

    10k GitHub starsUsed in 6 repos~1.2k tokens
    Backend & APIsAuto-check passed

  • Sub2API Admin

    Wei-Shaw/sub2api

    Manages a Sub2API deployment from the command line: accounts, redeem and invitation codes, groups, proxies, imports, exports and raw admin API calls.

    43k GitHub starsUsed in 1 repo~717 tokens
    Backend & APIsAuto-check passed

  • Firecrawl Build Onboarding

    firecrawl/firecrawl

    Gets Firecrawl working in a project: signs you in through the browser, saves FIRECRAWL_API_KEY to .env and picks the first SDK or REST path.

    189k GitHub starsUsed in 1 repo~1.4k tokens
    Backend & APIsAuto-check: notes

  • Obsidian Bases

    Atmosphere/atmosphere

    Create and edit Obsidian Bases (.base files) with views, filters, formulas, and summaries.

    3.8k GitHub starsUsed in 22 repos~3.2k tokens
    Backend & APIsAuto-check passed

  • Fortify Development

    coollabsio/coolify

    ACTIVATE when the user works on authentication in Laravel. An agent skill from coollabsio/coolify.

    63k GitHub starsUsed in 4 repos~1.9k tokens
    Backend & APIsAuto-check passed

More from Hack23/cia

All 78 skills in this repo

  • Accessibility Wcag Patterns

    Hack23/cia

    WCAG 2.1 AA compliance, ARIA attributes, keyboard navigation, screen reader optimization for accessible political data platforms

    239 GitHub stars~2.7k tokensUpdated today
    Auto-check passed

  • Advanced Data Visualization

    Hack23/cia

    Advanced chart types, D3.js/Vaadin Charts patterns, political data visualization, time series analysis

    239 GitHub stars~1.5k tokensUpdated today
    Auto-check passed

  • AI Governance

    Hack23/cia

    AI governance, EU AI Act compliance, OWASP LLM security, responsible AI practices for GitHub Copilot agents

    239 GitHub stars~1.4k tokensUpdated today
    Auto-check passed

  • API Integration

    Hack23/cia

    External API integration patterns, retry logic, circuit breakers, caching, rate limiting for government data APIs

    239 GitHub stars~1.9k tokensUpdated today
    Auto-check passed

  • AWS Cloudwatch Monitoring

    Hack23/cia

    AWS CloudWatch metrics, alarms, dashboards, log insights, and application monitoring for the CIA platform

    239 GitHub stars~1.9k tokensUpdated today
    Auto-check passed

  • AWS Security Architecture

    Hack23/cia

    AWS security best practices, VPC security, IAM, KMS, CloudTrail, GuardDuty for CIA platform deployment

    239 GitHub stars~2.3k tokensUpdated today
    Auto-check passed

Categories

Questions about Classification Framework Enforcement

What does Classification Framework Enforcement do?

Data classification enforcement, sensitivity labeling, and handling controls per classification level for the CIA platform. Classification Framework Enforcement is an agent skill from Hack23/cia.

When should I use Classification Framework Enforcement?

Classification Framework Enforcement fits situations like: backend & APIs work in your project.

How do I install Classification Framework Enforcement in Claude Code?

Run `npx skills add Hack23/cia --skill classification-framework-enforcement -a claude-code`. Or copy the skill folder (.github/skills/classification-framework-enforcement in Hack23/cia) into .claude/skills/classification-framework-enforcement in your project. Claude Code loads it when a task matches its description.

How do I install Classification Framework Enforcement in Codex?

Run `npx skills add Hack23/cia --skill classification-framework-enforcement -a codex`. Or copy the skill folder (.github/skills/classification-framework-enforcement in Hack23/cia) into .agents/skills/classification-framework-enforcement in your project. Codex loads it when a task matches its description.

Can I use Classification Framework Enforcement in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add Hack23/cia --skill classification-framework-enforcement -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/classification-framework-enforcement, .gemini/skills/classification-framework-enforcement, .github/skills/classification-framework-enforcement and .opencode/skills/classification-framework-enforcement in your project.

What does Classification Framework Enforcement need to run?

SKILL.md names no scripts, command-line tools or credentials: Classification Framework Enforcement is instructions for the agent only.

Does Classification Framework Enforcement access the network?

SKILL.md names 4 domains. As links in the text: iso.org, csrc.nist.gov, gdpr-info.eu and github.com. This is read from the text; nothing was executed.

Is Classification Framework Enforcement safe to install?

Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.

What licence does Classification Framework Enforcement use?

Classification Framework Enforcement is published under the Apache-2.0 licence (declared in SKILL.md). It allows redistribution, so the full SKILL.md is shown on this page.

How many tokens does Classification Framework Enforcement use?

About 2k tokens (SKILL.md is roughly 7.8k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.

What are the alternatives to Classification Framework Enforcement?

Skills that share tags, products or a category with Classification Framework Enforcement: Configuring Horizon (coollabsio/coolify, 63k stars), Nestjs Best Practices (rolling-scopes/rsschool-app, 10k stars), Sub2API Admin (Wei-Shaw/sub2api, 43k stars) and Firecrawl Build Onboarding (firecrawl/firecrawl, 189k stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains Classification Framework Enforcement?

Hack23 (a GitHub organization) maintains it in Hack23/cia, which has 239 GitHub stars. The repository holds 78 skills in this directory. The repository was last updated on October 6, 2026.

Source: Hack23/cia on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.