research
Start or resume an academic research project — idea through literature, methodology, writing, feedback, and publishing
Create an editable native draw.io diagram, optionally exported to PNG/SVG/PDF with embedded XML
> /plugin marketplace add GRCEngClub/claude-grc-engineeringHow it fires
How this command gets triggered: by you, by Claude, or both.
/drawioContext preview
What this command does when you run it.
Create an editable native draw.io diagram, optionally exported to PNG/SVG/PDF with embedded XML
description: Create an editable native draw.io diagram, optionally exported to PNG/SVG/PDF with embedded XML
Create a native editable draw.io diagram from the user's request.
1. Use the `drawio` skill. 2. If the request is GRC-specific, also use the most relevant GRC diagram companion skill. 3. Generate native mxGraphModel XML and write a `.drawio` file. 4. Validate XML well-formedness. 5. If an export format is requested and the draw.io CLI is available, export with embedded XML for PNG/SVG/PDF. 6. Return the absolute path to the created file.
/grc-diagrams:drawio flowchart for access review evidence collection /grc-diagrams:drawio png SOC 2 system boundary for a SaaS app /grc-diagrams:drawio svg framework crosswalk for SOC 2, ISO 27001, and NIST CSF
Open-source GRC Engineering resource for Claude. claude-grc-engineering turns technical evidence from cloud, SaaS, code, and security tools into framework-aligned findings, gap reports, remediation guidance, evidence packages, and OSCAL workflows.
Repo: GRCEngClub/claude-grc-engineering
Start or resume an academic research project — idea through literature, methodology, writing, feedback, and publishing
Query AWS for compliance-relevant configuration across IAM, S3, CloudTrail, EBS, and emit findings conforming to the v1 contract.
Install the frdocx-to-froscal-ssp Python pipeline and verify its dependencies. Idempotent.
Retrieve a single AWS Secrets Manager secret value to stdout or a 0600-permission file. Opt-in retrieval mode — never writes to the findings cache.
Run testssl.sh against one or more HTTPS endpoints and emit v1 Findings mapped to SOC 2, NIST 800-53, PCI DSS 4.0.1, ISO 27001, and SCF controls.