/collect-evidence
Generate scripts to collect audit evidence
$ npx -y skills add GRCEngClub/claude-grc-engineering --agent claude-codeHow it fires
How this command gets triggered: by you, by Claude, or both.
- Fires itselfClaude auto-loads it when your prompt matches the work.
- You can call itInvoke it directly when you want it.
- Slash command
/collect-evidence
Context preview
What this command does when you run it.
Generate scripts to collect audit evidence
Command definition
collect-evidence.mddescription: Generate scripts to collect audit evidence
Collect Evidence
Generates scripts to collect point-in-time evidence for audit controls.
Arguments
- `$1` - Control description (required, in quotes)
- `$2` - Cloud provider (optional, defaults to aws)
- `$3` - Output format (optional, defaults to python)
Supported Providers
- aws
- azure
- gcp
- kubernetes
Supported Formats
- python - Python script with SDK
- bash - Shell script with CLI commands
Instructions
1. Run the collect-evidence script:
node plugins/grc-engineer/scripts/collect-evidence.js "$ARGUMENTS"
2. The script generates an evidence collection script.
3. Configure credentials for the cloud provider.
4. Run the generated script to collect evidence.
5. Save the output for audit documentation.
Examples
# Collect AWS MFA evidence for SOC 2 /grc-engineer:collect-evidence "MFA for all root users" aws python # Collect PCI-DSS Requirement 8.4.2 evidence (MFA for CDE access) /grc-engineer:collect-evidence "MFA for cardholder data environment access" aws bash # Collect Azure access control evidence /grc-engineer:collect-evidence "Role-based access controls" azure python # Collect Kubernetes RBAC evidence /grc-engineer:collect-evidence "Pod security policies" kubernetes bash
Open-source GRC Engineering resource for Claude. claude-grc-engineering turns technical evidence from cloud, SaaS, code, and security tools into framework-aligned findings, gap reports, remediation guidance, evidence packages, and OSCAL workflows.
Repo: GRCEngClub/claude-grc-engineering
Other commands on trust-center.
- /research
Start or resume an academic research project — idea through literature, methodology, writing, feedback, and publishing
Open command - /collect
Query AWS for compliance-relevant configuration across IAM, S3, CloudTrail, EBS, and emit findings conforming to the v1 contract.
Open command - /setup
Install the frdocx-to-froscal-ssp Python pipeline and verify its dependencies. Idempotent.
Open command - /status
Check the deployment status of the trust center.
Open command - /scan
Run testssl.sh against one or more HTTPS endpoints and emit v1 Findings mapped to SOC 2, NIST 800-53, PCI DSS 4.0.1, ISO 27001, and SCF controls.
Open command - /compliance-posture
Serve a localhost compliance posture dashboard from monitor-continuous JSON
Open command