The CRA's reporting obligations (Article 14) have applied since 11 September 2026 to every product with digital elements on the EU market, including products shipped before the main obligations start on 11 December 2027. Fines go up to EUR 15 million or 2.5 % of worldwide turnover. No harmonised standard has been cited in the Official Journal yet, so there is no presumption of conformity to lean on and every manufacturer has to document its own solutions. I wanted something that could actually run against a codebase and an organisation rather than another slide deck, so I built a skill for AI coding agents ( any agent that reads an AGENTS.md). It is Apache-2.0 and agent-neutral. What it does: - Pins the Official Journal text of Regulation (EU) 2024/2847, the Implementing Regulation (EU) 2025/2392 on important and critical product categories, and the Delegated Regulation (EU) 2026/881 on delayed dissemination, fetched from the EU Publications Office and hashed. A parser turns the pinned text into 96 assessable provisions and all 26 Annex III and IV categories with their technical descriptions. Counts are asserted in tests, so a format change upstream fails loudly instead of silently dropping requirements. - Carries the Commission's 27 July 2026 guidance and FAQ as cited, non-binding aids, and keeps a dated register of what is still pending (standards, delegated acts, SBOM and notification format acts). - Decides scope, economic-operator role, remote-data-processing boundary and date regime with confidence levels and a "get legal confirmation" flag on borderline facts. - Classifies by core functionality and states which Article 32 conformity routes are legally available today (spoiler: important class I products cannot self-assess until a harmonised standard is cited). - Structures the Article 13 risk assessment with the per-requirement applicability statements the technical documentation must contain. - Validates CycloneDX and SPDX SBOMs against the legal minimum and reconciles them with lockfiles. - Assesses every Annex I Part I and Part II requirement, the Article 13 and 14 obligations, Annex II user information, Annex VII technical documentation and Annex V declaration content, with an interpretive guide per provision. - Tests Article 14 readiness, computes the 24 hour, 72 hour and final report deadlines, and supports tabletop drills. - Screens change sets for substantial modification with the Commission's four-factor test. - Produces drafts of the technical documentation, an unsigned declaration of conformity, user information, CVD policy, security.txt, support-period statement and reporting playbook, plus a readiness report in Markdown, DOCX and PDF. A monthly workflow re-fetches the official texts and opens a review PR if anything changes. Repo: https://github.com/Killerz007/cra-readiness-skill Caveats: it is a readiness assessment, not a conformity assessment, not CE marking and not legal advice. Scope and classification outputs are technical reads of the facts against the text and the Commission guidance; borderline cases are flagged for counsel. I would especially like feedback from anyone who has been through a notified body or a market surveillance request on what evidence they actually asked for.   submitted by   /u/themorrigan86 [link]   [comments]