/control-map
Create an editable draw.io grc control map diagram for GRC professionals
$ npx -y skills add GRCEngClub/claude-grc-engineering --agent claude-codeHow it fires
How this command gets triggered: by you, by Claude, or both.
- Fires itselfClaude auto-loads it when your prompt matches the work.
- You can call itInvoke it directly when you want it.
- Slash command
/control-map
Context preview
What this command does when you run it.
Create an editable draw.io grc control map diagram for GRC professionals
Command definition
control-map.mddescription: Create an editable draw.io grc control map diagram for GRC professionals
Control Map
Create an editable draw.io diagram for controls mapped across frameworks, systems, owners, risks, and evidence sources.
Arguments
- `$ARGUMENTS` - Scope, framework(s), system(s), audience, and optional export format such as `png`, `svg`, or `pdf`.
Instructions
1. Use the `grc-control-map-diagram` skill to structure the GRC-specific content. 2. Use the `drawio` skill to generate the native `.drawio` file. 3. Include owners, control IDs, evidence sources, systems, risks, scope boundaries, and decision points when relevant. 4. If the user requested PNG/SVG/PDF, export with embedded diagram XML when the draw.io CLI is available. 5. Return the absolute path to the created file.
Examples
/grc-diagrams:control-map SOC 2 access controls for AWS, Okta, and GitHub /grc-diagrams:control-map FedRAMP moderate cloud platform, auditor audience, svg /grc-diagrams:control-map startup SaaS, executive overview, png
Open-source GRC Engineering resource for Claude. claude-grc-engineering turns technical evidence from cloud, SaaS, code, and security tools into framework-aligned findings, gap reports, remediation guidance, evidence packages, and OSCAL workflows.
Repo: GRCEngClub/claude-grc-engineering
Other commands on trust-center.
- /research
Start or resume an academic research project — idea through literature, methodology, writing, feedback, and publishing
Open command - /collect
Query AWS for compliance-relevant configuration across IAM, S3, CloudTrail, EBS, and emit findings conforming to the v1 contract.
Open command - /setup
Install the frdocx-to-froscal-ssp Python pipeline and verify its dependencies. Idempotent.
Open command - /status
Check the deployment status of the trust center.
Open command - /scan
Run testssl.sh against one or more HTTPS endpoints and emit v1 Findings mapped to SOC 2, NIST 800-53, PCI DSS 4.0.1, ISO 27001, and SCF controls.
Open command - /compliance-posture
Serve a localhost compliance posture dashboard from monitor-continuous JSON
Open command