# TSA Cybersecurity Compliance > Guidance on US TSA cybersecurity directives for pipeline, rail and transit operators: scope, gap assessments, plans and incident reporting. TSA Cybersecurity Compliance is a community Agent Skill by Hemant Naik (sushegaad on GitHub), part of his Claude Skills for Governance, Risk and Compliance collection. TSA here is the US Transportation Security Administration. The skill covers its cybersecurity Security Directives for transportation critical infrastructure: SD Pipeline-2021-01 and -02 for pipeline operators, SD 1580-21-01 for freight railroads and SD 1582-21-01 for public transit and passenger rail, plus the November 2024 proposed rule (NPRM) that would turn them into permanent regulations. It's written for operators' security, OT/ICS and compliance teams, and for the consultants who work with them. What you can do with it - Work out whether TSA's directives apply to you, by sector and by whether TSA has designated you as covered - Run a gap assessment against the directive that applies, as a table of requirement, status, gap and evidence needed, with a prioritised remediation roadmap - Draft a Cybersecurity Implementation Plan (CIP or COIP) or a Cybersecurity Assessment Plan (CAP), with the sections that need site-specific detail flagged - Plan incident response: reporting incidents to CISA, the incident response plan and its annual testing - Get guidance on the four technical areas: IT/OT network segmentation, access controls, continuous monitoring and patch management - Prepare for an Architecture Design Review, and draft TSA-aligned policies mapped to the directive sections they serve - See what the 2024 NPRM would change, and how it lines up with NIST CSF 2.0 and CISA's Cross-Sector Cybersecurity Performance Goals How it works It's an Agent Skill: one SKILL.md with three reference files (a directives overview, the risk management program requirements, and incident reporting). The author also publishes it as a Claude Code plugin, tsa-compliance, in his own grc-skills marketplace. It comes into play when you ask about TSA directives. Tell it your sector, your IT/OT setup and which directive you're under for the most useful answers. Good to know - TSA's directives are Sensitive Security Information, so their full text isn't public. The skill works from public summaries, Federal Register notices and DHS and CISA publications, and covered operators should treat the directive TSA sent them as the authority. - The author says its output is informational guidance, not legal, regulatory or professional compliance advice. He recommends working with TSA, your legal counsel and qualified OT/ICS security professionals, and checking against the current revision of your directive. - It's a community project by an individual, not made by TSA, CISA or Anthropic. - Type: Skill - Made by: sushegaad - Category: Legal & compliance - Formats: Skills - Version: 8e66aea - Website: https://sushegaad.github.io/Claude-Skills-Governance-Risk-and-Compliance/ - Source: https://github.com/sushegaad/claude-skills-governance-risk-and-compliance/tree/HEAD/plugins/tsa-compliance/skills/tsa-compliance - Page: https://pluginboard.ai/skills/tsa-compliance ## Works with - ChatGPT - Claude - Gemini - GitHub Copilot - Cursor - Claude Code - Codex - Antigravity - Gemini CLI - Replit - OpenClaw - OpenCode - Hermes Agent ## Install ### ChatGPT In ChatGPT: Download the tsa-compliance folder and zip it, then Plugins → Skills → Create → Upload from your computer. Business and Enterprise plans. View the folder on GitHub: https://github.com/Sushegaad/Claude-Skills-Governance-Risk-and-Compliance/tree/HEAD/plugins/tsa-compliance/skills/tsa-compliance ### Claude In Claude (web or desktop): Download the tsa-compliance folder and zip the folder itself, then upload it in Customize → Skills. View the folder on GitHub: https://github.com/Sushegaad/Claude-Skills-Governance-Risk-and-Compliance/tree/HEAD/plugins/tsa-compliance/skills/tsa-compliance ### Gemini In Gemini: Download the tsa-compliance folder, then at gemini.google.com click Customize → Skills → Create → Upload and pick the folder (or a .zip of it). View the folder on GitHub: https://github.com/Sushegaad/Claude-Skills-Governance-Risk-and-Compliance/tree/HEAD/plugins/tsa-compliance/skills/tsa-compliance ### GitHub Copilot Run in your terminal: ```shell npx -y degit Sushegaad/Claude-Skills-Governance-Risk-and-Compliance/plugins/tsa-compliance/skills/tsa-compliance ~/.copilot/skills/tsa-compliance ``` View the folder on GitHub: https://github.com/Sushegaad/Claude-Skills-Governance-Risk-and-Compliance/tree/HEAD/plugins/tsa-compliance/skills/tsa-compliance ### Cursor Run in your terminal: ```shell npx -y degit Sushegaad/Claude-Skills-Governance-Risk-and-Compliance/plugins/tsa-compliance/skills/tsa-compliance ~/.cursor/skills/tsa-compliance ``` View the folder on GitHub: https://github.com/Sushegaad/Claude-Skills-Governance-Risk-and-Compliance/tree/HEAD/plugins/tsa-compliance/skills/tsa-compliance ### Claude Code Run in your terminal: ```shell npx -y degit Sushegaad/Claude-Skills-Governance-Risk-and-Compliance/plugins/tsa-compliance/skills/tsa-compliance ~/.claude/skills/tsa-compliance ``` View the folder on GitHub: https://github.com/Sushegaad/Claude-Skills-Governance-Risk-and-Compliance/tree/HEAD/plugins/tsa-compliance/skills/tsa-compliance Or as a Claude Code plugin: ```text /plugin marketplace add Sushegaad/Claude-Skills-Governance-Risk-and-Compliance /plugin install tsa-compliance@grc-skills ``` ### Codex Run in your terminal: ```shell npx -y degit Sushegaad/Claude-Skills-Governance-Risk-and-Compliance/plugins/tsa-compliance/skills/tsa-compliance ~/.agents/skills/tsa-compliance ``` View the folder on GitHub: https://github.com/Sushegaad/Claude-Skills-Governance-Risk-and-Compliance/tree/HEAD/plugins/tsa-compliance/skills/tsa-compliance ### Antigravity In Antigravity: Copy the tsa-compliance folder into ~/.gemini/config/skills (Antigravity app and IDE) or ~/.gemini/antigravity-cli/skills (Antigravity CLI). View the folder on GitHub: https://github.com/Sushegaad/Claude-Skills-Governance-Risk-and-Compliance/tree/HEAD/plugins/tsa-compliance/skills/tsa-compliance ### Gemini CLI Run in your terminal: ```shell npx -y degit Sushegaad/Claude-Skills-Governance-Risk-and-Compliance/plugins/tsa-compliance/skills/tsa-compliance ~/.gemini/skills/tsa-compliance ``` View the folder on GitHub: https://github.com/Sushegaad/Claude-Skills-Governance-Risk-and-Compliance/tree/HEAD/plugins/tsa-compliance/skills/tsa-compliance ### Replit Run in your terminal: ```shell npx -y degit Sushegaad/Claude-Skills-Governance-Risk-and-Compliance/plugins/tsa-compliance/skills/tsa-compliance .agents/skills/tsa-compliance ``` View the folder on GitHub: https://github.com/Sushegaad/Claude-Skills-Governance-Risk-and-Compliance/tree/HEAD/plugins/tsa-compliance/skills/tsa-compliance ### OpenClaw Run in your terminal: ```shell npx -y degit Sushegaad/Claude-Skills-Governance-Risk-and-Compliance/plugins/tsa-compliance/skills/tsa-compliance ~/.openclaw/skills/tsa-compliance ``` View the folder on GitHub: https://github.com/Sushegaad/Claude-Skills-Governance-Risk-and-Compliance/tree/HEAD/plugins/tsa-compliance/skills/tsa-compliance ### OpenCode Run in your terminal: ```shell npx -y degit Sushegaad/Claude-Skills-Governance-Risk-and-Compliance/plugins/tsa-compliance/skills/tsa-compliance ~/.config/opencode/skills/tsa-compliance ``` View the folder on GitHub: https://github.com/Sushegaad/Claude-Skills-Governance-Risk-and-Compliance/tree/HEAD/plugins/tsa-compliance/skills/tsa-compliance ### Hermes Agent Run in your terminal: ```shell npx -y degit Sushegaad/Claude-Skills-Governance-Risk-and-Compliance/plugins/tsa-compliance/skills/tsa-compliance ~/.hermes/skills/tsa-compliance ``` View the folder on GitHub: https://github.com/Sushegaad/Claude-Skills-Governance-Risk-and-Compliance/tree/HEAD/plugins/tsa-compliance/skills/tsa-compliance --- From Pluginboard (https://pluginboard.ai).