/generate-workpaper
Generate audit workpaper documentation
$ npx -y skills add GRCEngClub/claude-grc-engineering --agent claude-codeHow it fires
How this command gets triggered: by you, by Claude, or both.
- Fires itselfClaude auto-loads it when your prompt matches the work.
- You can call itInvoke it directly when you want it.
- Slash command
/generate-workpaper
Context preview
What this command does when you run it.
Generate audit workpaper documentation
Command definition
generate-workpaper.mddescription: Generate audit workpaper documentation
Generate Workpaper
Creates structured audit workpaper documentation for findings and testing.
Arguments
- `$1` - Workpaper type (required: finding, test, summary)
- `$2` - Control or area (required)
Workpaper Types
- **finding** - Document an audit finding with condition, criteria, cause, effect
- **test** - Document control testing procedures and results
- **summary** - Generate executive summary of audit area
Instructions
1. Gather relevant information about the control/area 2. Structure the workpaper per professional standards 3. Include all required elements:
- Objective
- Scope
- Procedures
- Results
- Conclusions
- Preparer/Reviewer signoff blocks
Examples
# Generate finding workpaper /grc-auditor:generate-workpaper finding "Access Control Deficiency" # Generate PCI-DSS control test workpaper /grc-auditor:generate-workpaper test "PCI-DSS Requirement 8.4.2 - MFA Implementation" # Generate SOC 2 summary workpaper /grc-auditor:generate-workpaper summary "CC6 - Logical and Physical Access Controls"
Open-source GRC Engineering resource for Claude. claude-grc-engineering turns technical evidence from cloud, SaaS, code, and security tools into framework-aligned findings, gap reports, remediation guidance, evidence packages, and OSCAL workflows.
Repo: GRCEngClub/claude-grc-engineering
Other commands on trust-center.
- /research
Start or resume an academic research project — idea through literature, methodology, writing, feedback, and publishing
Open command - /collect
Query AWS for compliance-relevant configuration across IAM, S3, CloudTrail, EBS, and emit findings conforming to the v1 contract.
Open command - /setup
Install the frdocx-to-froscal-ssp Python pipeline and verify its dependencies. Idempotent.
Open command - /status
Check the deployment status of the trust center.
Open command - /scan
Run testssl.sh against one or more HTTPS endpoints and emit v1 Findings mapped to SOC 2, NIST 800-53, PCI DSS 4.0.1, ISO 27001, and SCF controls.
Open command - /compliance-posture
Serve a localhost compliance posture dashboard from monitor-continuous JSON
Open command

