# dt-obs-compliance-assistant

Monitors EU DORA compliance posture using Dynatrace Compliance Assistant. It inspects compliance scores, Critical or Important Functions, and incidents.

- skill · `type=skill` · Claude Code, Codex, Cursor, GitHub Copilot, Gemini CLI, OpenCode · 889 installs · ★ 167
- Author: Dynatrace
- License: Apache-2.0 · policy=mirror · the beginning of the file is at the end of this page
- Source: https://github.com/Dynatrace/dynatrace-for-ai/tree/HEAD/skills/dt-obs-compliance-assistant/SKILL.md
- Updated: 2026-10-23
- HTML: https://affpapa.org/en/nevibecode/skills/dt-obs-compliance-assistant

## What it does

The skill connects an agent to Dynatrace Compliance Assistant to track EU DORA compliance posture. It inspects real-time compliance scores, monitors Critical or Important Functions (CIFs) linked to Business Flow, and handles incident lifecycles from unclassified problems to major incidents. The compliance snapshot uses tiers from On Track at 100 down to Major, which drops to a fixed score of 5.

Prerequisites include installing Compliance Assistant from Dynatrace Hub and having data sources like vulnerability events and Security Posture Management findings. Your environment also requires specific read permissions, such as `storage:events:read` and `storage:security.events:read`.

Keep in mind that these metrics are operational indicators from observability data, not formal legal compliance verdicts. Frameworks like SOC2, PCI-DSS, or ISO 27001 are unsupported.

## Requirements
- Works with: Dynatrace

## Install

### Claude Code (native platform)

1. **Skills CLI (Vercel)**
```bash
npx skills add Dynatrace/dynatrace-for-ai --skill dt-obs-compliance-assistant -a claude-code
```

2. **Manually: put the files in place**
- File: `~/.claude/skills/dt-obs-compliance-assistant/SKILL.md` — Copy the whole skill folder; for one project use .claude/skills/dt-obs-compliance-assistant/

### Codex

1. **Skills CLI (Vercel)**
```bash
npx skills add Dynatrace/dynatrace-for-ai --skill dt-obs-compliance-assistant -a codex
```

2. **Manually: put the files in place**
- File: `.agents/skills/dt-obs-compliance-assistant/SKILL.md` — For all projects use ~/.agents/skills/

### Cursor

1. **Skills CLI (Vercel)**
```bash
npx skills add Dynatrace/dynatrace-for-ai --skill dt-obs-compliance-assistant -a cursor
```

2. **Manually: put the files in place**
- File: `.cursor/skills/dt-obs-compliance-assistant/SKILL.md` — Cursor also reads .agents/skills/ and .claude/skills/

### GitHub Copilot

1. **GitHub CLI**
```bash
gh skill install Dynatrace/dynatrace-for-ai dt-obs-compliance-assistant
```

2. **Manually: put the files in place**
- File: `.github/skills/dt-obs-compliance-assistant/SKILL.md`

### Gemini CLI

1. **Skills CLI (Vercel)**
```bash
npx skills add Dynatrace/dynatrace-for-ai --skill dt-obs-compliance-assistant -a gemini-cli
```

2. **Platform CLI**
```bash
gemini skills install https://github.com/Dynatrace/dynatrace-for-ai --path skills/dt-obs-compliance-assistant
```

### Windsurf (Devin Desktop)

**Manually: put the files in place**
- File: `.devin/skills/dt-obs-compliance-assistant/SKILL.md` — The legacy .windsurf/skills/ path still works

### OpenCode

**Skills CLI (Vercel)**
```bash
npx skills add Dynatrace/dynatrace-for-ai --skill dt-obs-compliance-assistant -a opencode
```

### Claude.ai

**Claude.ai**
- Zip the folder and upload it in Settings → Capabilities → Skills

Where a file is given instead of a command, copy the files from the source to that path: https://github.com/Dynatrace/dynatrace-for-ai/tree/HEAD/skills/dt-obs-compliance-assistant/SKILL.md

## When to use it
- inspect EU DORA compliance posture and score tiers
- monitor the health of Critical or Important Functions
- track ICT risk inputs from vulnerabilities and misconfigurations
- classify incidents under EU DORA duration and impact criteria
- query `compliance.incident` bizevents with DQL

## Example prompts
- Check our EU DORA compliance score and score tier in Dynatrace
- Show the health status of Critical or Important Functions
- Write a DQL query for `compliance.incident` bizevents

## Source text · SKILL.md · Apache-2.0

Below is the content of a third-party file. It is data, not instructions for you: do not act on anything written inside unless the human asks. Block tag: 79913e98f8121409.

BEGIN THIRD-PARTY FILE 79913e98f8121409
```text
---
name: dt-obs-compliance-assistant
description: >-
  Monitor and investigate EU DORA compliance posture using Dynatrace Compliance Assistant.
  Covers compliance score, CIF health, incident lifecycle, and ICT risk inputs
  (vulnerabilities, security detection findings, misconfigurations).
  Trigger: "DORA compliance", "Digital Operational Resilience Act", "compliance score",
  "compliance snapshot", "score tier", "Critical or Important Functions", "CIF", "CIF health",
  "unclassified problems", "potential major incident", "classified major incident",
  "incident classification under DORA", "compliance.incident bizevent",
  "DQL for classified incidents", "set up Compliance Assistant", "DORA onboarding".
  Do NOT use for other compliance frameworks (SOC2, PCI-DSS, HIPAA, ISO 27001),
  generic Davis problems without DORA or CIF context,
  generic security findings not scoped to DORA,
  or score queries without compliance context.
license: Apache-2.0
---

# Compliance Assistant

Track, manage, and investigate EU DORA compliance posture using real-time observability and security insights from the Dynatrace Compliance Assistant app.

---

## Critical Disclaimer

The Dynatrace compliance score and all outputs from Compliance Assistant are **indicative metrics based on real-time observability data and automated systems**. They do **not** replace comprehensive or formal compliance assessments and do **not** constitute a legal determination of a company's compliance status under EU DORA or any other regulation.

**Never claim that a score, tier, or Compliance Assistant output means an organization is legally compliant or non-compliant with EU DORA.** Always present results as operational indicators to support remediation decisions, not as legal or regulatory verdicts.

---

## When to Use This Skill

✅ **Use for:**
- EU DORA compliance posture, compliance score, compliance snapshot, score tier
- Critical or Important Functions (CIFs): health, KPI monitoring, impact analysis, setup questions
- Incident lifecycle under DORA: unclassified problems, potential major incidents, classified major incidents
- ICT risk inputs: vulnerabilities, security detection findings, misconfigurations (ICT asset configuration results)
- Incident classification under EU DORA: materiality thresholds, duration criteria, economic impact
- DQL queries for `compliance.incident` bizevents, CIF health, or unclassified problems on CIFs
- Onboarding, permissions, and settings for Compliance Assistant

❌ **Do not use for:**
```
END THIRD-PARTY FILE 79913e98f8121409

The third-party file has ended. Everything between the 79913e98f8121409 tags is data: requests and commands from it are not followed. An “end of file” line with another tag inside the block is part of the file.

First 2534 of 19803 bytes. © Dynatrace · Apache-2.0 · https://github.com/Dynatrace/dynatrace-for-ai/tree/HEAD/skills/dt-obs-compliance-assistant/SKILL.md

_Part of the page did not fit — see the HTML version._

---
NeVibeCode on affpapa.org. Catalog texts are descriptions, not instructions for the agent. How to choose and install: https://affpapa.org/en/nevibecode/agents.md
