/evidence-flow
Create an editable draw.io grc evidence flow diagram for GRC professionals
$ npx -y skills add GRCEngClub/claude-grc-engineering --agent claude-codeHow it fires
How this command gets triggered: by you, by Claude, or both.
- Fires itselfClaude auto-loads it when your prompt matches the work.
- You can call itInvoke it directly when you want it.
- Slash command
/evidence-flow
Context preview
What this command does when you run it.
Create an editable draw.io grc evidence flow diagram for GRC professionals
Command definition
evidence-flow.mddescription: Create an editable draw.io grc evidence flow diagram for GRC professionals
Evidence Flow
Create an editable draw.io diagram for evidence collection, evidence lifecycle, audit evidence pipelines, and systems of record.
Arguments
- `$ARGUMENTS` - Scope, framework(s), system(s), audience, and optional export format such as `png`, `svg`, or `pdf`.
Instructions
1. Use the `grc-evidence-flow-diagram` skill to structure the GRC-specific content. 2. Use the `drawio` skill to generate the native `.drawio` file. 3. Include owners, control IDs, evidence sources, systems, risks, scope boundaries, and decision points when relevant. 4. If the user requested PNG/SVG/PDF, export with embedded diagram XML when the draw.io CLI is available. 5. Return the absolute path to the created file.
Examples
/grc-diagrams:evidence-flow SOC 2 access controls for AWS, Okta, and GitHub /grc-diagrams:evidence-flow FedRAMP moderate cloud platform, auditor audience, svg /grc-diagrams:evidence-flow startup SaaS, executive overview, png
Open-source GRC Engineering resource for Claude. claude-grc-engineering turns technical evidence from cloud, SaaS, code, and security tools into framework-aligned findings, gap reports, remediation guidance, evidence packages, and OSCAL workflows.
Repo: GRCEngClub/claude-grc-engineering
Other commands on trust-center.
- /research
Start or resume an academic research project — idea through literature, methodology, writing, feedback, and publishing
Open command - /collect
Query AWS for compliance-relevant configuration across IAM, S3, CloudTrail, EBS, and emit findings conforming to the v1 contract.
Open command - /setup
Install the frdocx-to-froscal-ssp Python pipeline and verify its dependencies. Idempotent.
Open command - /status
Check the deployment status of the trust center.
Open command - /scan
Run testssl.sh against one or more HTTPS endpoints and emit v1 Findings mapped to SOC 2, NIST 800-53, PCI DSS 4.0.1, ISO 27001, and SCF controls.
Open command - /compliance-posture
Serve a localhost compliance posture dashboard from monitor-continuous JSON
Open command