Skip to content
Security
Command

/evidence-flow

Create an editable draw.io grc evidence flow diagram for GRC professionals

From plugin
trust-center
430140 skills140 commands1 MCP
> /plugin marketplace add GRCEngClub/claude-grc-engineering

Command definition

evidence-flow.md
description: Create an editable draw.io grc evidence flow diagram for GRC professionals

Evidence Flow

Create an editable draw.io diagram for evidence collection, evidence lifecycle, audit evidence pipelines, and systems of record.

Arguments

  • `$ARGUMENTS` - Scope, framework(s), system(s), audience, and optional export format such as `png`, `svg`, or `pdf`.

Instructions

1. Use the `grc-evidence-flow-diagram` skill to structure the GRC-specific content. 2. Use the `drawio` skill to generate the native `.drawio` file. 3. Include owners, control IDs, evidence sources, systems, risks, scope boundaries, and decision points when relevant. 4. If the user requested PNG/SVG/PDF, export with embedded diagram XML when the draw.io CLI is available. 5. Return the absolute path to the created file.

Examples

/grc-diagrams:evidence-flow SOC 2 access controls for AWS, Okta, and GitHub
/grc-diagrams:evidence-flow FedRAMP moderate cloud platform, auditor audience, svg
/grc-diagrams:evidence-flow startup SaaS, executive overview, png
@grcengclub
Ships withtrust-center

Open-source GRC Engineering resource for Claude. claude-grc-engineering turns technical evidence from cloud, SaaS, code, and security tools into framework-aligned findings, gap reports, remediation guidance, evidence packages, and OSCAL workflows.

430101 skills1 MCP
Get the whole plugin

Stars on GitHub

Momentum

stars in total
430
Star history of GRCEngClub/claude-grc-engineering on GitHub, a chart by star-history.com

Other commands on trust-center.

research

research

Command

Start or resume an academic research project — idea through literature, methodology, writing, feedback, and publishing

collect

collect

Command

Query AWS for compliance-relevant configuration across IAM, S3, CloudTrail, EBS, and emit findings conforming to the v1 contract.

setup

setup

Command

Install the frdocx-to-froscal-ssp Python pipeline and verify its dependencies. Idempotent.

retrieve

retrieve

Command

Retrieve a single AWS Secrets Manager secret value to stdout or a 0600-permission file. Opt-in retrieval mode — never writes to…

scan

scan

Command

Run testssl.sh against one or more HTTPS endpoints and emit v1 Findings mapped to SOC 2, NIST 800-53, PCI DSS 4.0.1, ISO 27001,…

More commands from other plugins.

deslop-reborn

deslop-reborn

Command

One iteration of the IronClaw Reborn de-slop loop — take ONE Reborn crate, fan out parallel review sub-agents (thermo-nuclear…

ironclaw13d13k
@nearai@nearaiInstall Command
audit

audit

Command

Audit a file, directory, or whole repo for insecure default configuration: fallback secrets, default credentials, fail-open…

@trailofbits@trailofbitsInstall Command
arsenal

arsenal

Command

Show which external bug-bounty tools are installed on this machine and print install hints for the missing ones. Curated from…

@awarexone@awarexoneInstall Command