/compliance-posture
Serve a localhost compliance posture dashboard from monitor-continuous JSON
$ npx -y skills add GRCEngClub/claude-grc-engineering --agent claude-codeHow it fires
How this command gets triggered: by you, by Claude, or both.
- Fires itselfClaude auto-loads it when your prompt matches the work.
- You can call itInvoke it directly when you want it.
- Slash command
/compliance-posture
Context preview
What this command does when you run it.
Serve a localhost compliance posture dashboard from monitor-continuous JSON
Command definition
compliance-posture.mddescription: Serve a localhost compliance posture dashboard from monitor-continuous JSON
Compliance Posture Dashboard
Serves a local HTML dashboard from saved `/grc-engineer:monitor-continuous` JSON output.
Implementation: [`scripts/serve.js`](../scripts/serve.js).
Usage
/dashboard:compliance-posture --data=<path> [--port=8787]
Local script form:
node plugins/dashboards/compliance-posture/scripts/serve.js \ --data=grc-data/dashboard/monitor-continuous \ --port=8787
Options
- `--data=<path>` - JSON file or directory tree to read. Repeat as
comma-separated paths.
- `--host=<host>` - Bind host. Defaults to `127.0.0.1`.
- `--port=<port>` - Bind port. Defaults to `8787`.
- `--demo` - Serve built-in demo monitor runs and ignore local JSON.
- `--help` - Show CLI help.
Monitor Output
Generate dashboard input with:
node plugins/grc-engineer/scripts/monitor-continuous.js SOC2,NIST-800-53 \ --output=grc-data/dashboard/monitor-continuous/$(date +%Y%m%dT%H%M%S).json \ --no-exit-code
The dashboard reads the saved JSON manifests and computes latest state, trends, and deltas at view time. It does not require Claude to retain historical state.
Open-source GRC Engineering resource for Claude. claude-grc-engineering turns technical evidence from cloud, SaaS, code, and security tools into framework-aligned findings, gap reports, remediation guidance, evidence packages, and OSCAL workflows.
Repo: GRCEngClub/claude-grc-engineering
Other commands on trust-center.
- /research
Start or resume an academic research project — idea through literature, methodology, writing, feedback, and publishing
Open command - /collect
Query AWS for compliance-relevant configuration across IAM, S3, CloudTrail, EBS, and emit findings conforming to the v1 contract.
Open command - /setup
Install the frdocx-to-froscal-ssp Python pipeline and verify its dependencies. Idempotent.
Open command - /status
Check the deployment status of the trust center.
Open command - /scan
Run testssl.sh against one or more HTTPS endpoints and emit v1 Findings mapped to SOC 2, NIST 800-53, PCI DSS 4.0.1, ISO 27001, and SCF controls.
Open command - /convert
Convert FedRAMP Rev 5 SSP DOCX templates (main SSP + Appendix A) to OSCAL 1.2.0 SSP JSON.
Open command