agentmods.dev

cipp-standards

cipp-standards is a skill for Claude Code from WYRE-AI/msp-claude-plugins. It costs 59 tokens per session (1,313 once invoked), scanned A, original, Apache-2.0.

A set of rules for defining and checking the expected Microsoft 365 setup across managed customer accounts. It includes reporting, alerts, automatic fixes, recommended-practice reports, and email-authentication checks for SPF, DKIM, and DMARC.

In plain words
What is it for?
Use it to define Microsoft 365 baselines, review customer compliance, run checks on demand, and fix email-authentication problems.
Why use it?
It helps find differences between the setup you expect and the setup customers actually have. It also provides a controlled way to report or fix those differences.

Skill for Claude Code

Written for Claude Code: when-to-use in frontmatter.

Part of the cipp plugin — 7 skills, 4 commands, 2 agents shipped together

not rated 52repo yesterday A scan SkillSpector: pass 59 tokens original Apache-2.0

Good fit Use it to define Microsoft 365 baselines, review customer compliance, run checks on demand, and fix email-authentication problems.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/wyre-ai/msp-claude-plugins/standards
View source ↗ WYRE-AI/msp-claude-plugins mcp.wyre.ai
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add WYRE-AI/msp-claude-plugins --skill standards
Clone the repo
git clone --depth 1 https://github.com/WYRE-AI/msp-claude-plugins

Made for: Claude Code.

Or install cipp, the plugin that ships this one along with the rest of its 7 skills, 4 commands, 2 agents.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for cipp-standards

README.md
[![agentmods](https://agentmods.dev/badge/skills/wyre-ai/msp-claude-plugins/standards/github.svg)](https://agentmods.dev/skills/wyre-ai/msp-claude-plugins/standards)
Your own site
<a href="https://agentmods.dev/skills/wyre-ai/msp-claude-plugins/standards"><img src="https://agentmods.dev/badge/skills/wyre-ai/msp-claude-plugins/standards/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for cipp-standards

Your own site · 80×15
<a href="https://agentmods.dev/skills/wyre-ai/msp-claude-plugins/standards"><img src="https://agentmods.dev/badge/skills/wyre-ai/msp-claude-plugins/standards.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 59 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 1,313 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe. Third-party audits
  • NVIDIA SkillSpector pass 7 Sept 2026
How audits are shown
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00059 $0.01313
Opus 5.5 $0.00024 $0.00525
Sonnet 5.5 $0.00012 $0.00263
Haiku 4.5 $0.00006 $0.00131

Measured 2mo ago against content hash eac081980f80, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

cipp-standards scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2mo ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

msp-claude-plugins/cipp/cipp/skills/standards/SKILL.md · 121 lines

How it starts

The opening of the file, as written. The whole thing — 121 lines — stays where its author put it; the contents beside it link to each section on GitHub.

CIPP Standards & BPA

Standards are CIPP's mechanism for declaring "this is what every tenant we manage should look like" and continuously enforcing it. The Best Practice Analyser (BPA) is the read side — it shows you where current tenant state diverges from CIPP's recommended baseline. Domain health is a complementary check focused on email authentication.

Anti-triggers

  • Drift against an Inforcer baseline — Inforcer and CIPP both say "baseline", "drift", and "secure score" but measure different things against different templates; a tenant can be CIPP-compliant and Inforcer-drifted at once. Use inforcer-baseline-alignment.
  • Inspecting Conditional Access policies — CA policies are not CIPP standards and do not appear in BPA output; use cipp-security.
  • Triaging what an Alert-mode standard actually raised — the queue those alerts land in is cipp-alerts.
  • Drift measured across more than the CIPP-managed estate — the cross-vendor method for comparing tenants to a baseline and deciding what to remediate is compliance-pack-standards-drift; this skill is the CIPP standards engine it reads.

Tools

cipp_list_standards

cipp_list_standards(tenantFilter='contoso.onmicrosoft.com')

Returns the list of standards configured for the tenant: which standards are enabled, what action each takes (Report, Alert, Remediate), and current compliance status. Use tenantFilter='allTenants' for a portfolio-wide view.

cipp_run_standards_check

cipp_run_standards_check(tenantFilter='contoso.onmicrosoft.com')

Triggers an on-demand standards evaluation. CIPP runs this on a schedule, but force a fresh run after deploying a new standard or remediating a finding to confirm the fix took.

cipp_list_bpa

cipp_list_bpa(tenantFilter='contoso.onmicrosoft.com')

Returns the latest Best Practice Analyser report — every CIPP-recommended check with Pass/Fail/Warn status across categories (Security, Identity, Mail, SharePoint, Teams, Intune). The most useful single call for tenant health.

Read the full file on GitHub · 121 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2mo ago First seen · 121 lines · 59 tokens per session scan A eac081980f80

Subscribe to this mod's changes

cipp-standards is a skill published in the GitHub repository WYRE-AI/msp-claude-plugins (52 stars, last pushed yesterday), licensed Apache-2.0. It adds 59 tokens to every session and 1,313 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-04.

Claude CodeSecurityclaudeclaude-pluginsmsppsarmm
Related

cipp-standards compared with skills from other repositories

cipp-standards next to 6 skills from other repositories
ModTypeStarsLast pushLicenceScanTokensWorks with
cipp-standardsWYRE-AI/msp-claude-pluginsSkill52yesterdayApache-2.0A59Claude Code
live-previewSethGammon/CitadelSkill927yesterdayMITA40Claude Code
media-gemini-3-image-promptmodu-ai/moai-coworkSkill31529d agoApache-2.0A329Claude Code
cs-voc-triagemodu-ai/moai-coworkSkill31529d agoApache-2.0A358Claude Code
design-copywritingmodu-ai/moai-coworkSkill31529d agoApache-2.0A81Claude Code
content-card-newsmodu-ai/moai-coworkSkill31529d agoApache-2.0A58Claude Code
lead-intelligencenaveedharri/benai-skillsSkill7828d agoMITA150Claude Code