Skip to content
Security
Command

/generate-workpaper

Generate audit workpaper documentation

From plugin
trust-center
430140 skills140 commands1 MCP
> /plugin marketplace add GRCEngClub/claude-grc-engineering

Command definition

generate-workpaper.md
description: Generate audit workpaper documentation

Generate Workpaper

Creates structured audit workpaper documentation for findings and testing.

Arguments

  • `$1` - Workpaper type (required: finding, test, summary)
  • `$2` - Control or area (required)

Workpaper Types

  • **finding** - Document an audit finding with condition, criteria, cause, effect
  • **test** - Document control testing procedures and results
  • **summary** - Generate executive summary of audit area

Instructions

1. Gather relevant information about the control/area 2. Structure the workpaper per professional standards 3. Include all required elements:

  • Objective
  • Scope
  • Procedures
  • Results
  • Conclusions
  • Preparer/Reviewer signoff blocks

Examples

# Generate finding workpaper
/grc-auditor:generate-workpaper finding "Access Control Deficiency"

# Generate PCI-DSS control test workpaper
/grc-auditor:generate-workpaper test "PCI-DSS Requirement 8.4.2 - MFA Implementation"

# Generate SOC 2 summary workpaper
/grc-auditor:generate-workpaper summary "CC6 - Logical and Physical Access Controls"
@grcengclub
Ships withtrust-center

Open-source GRC Engineering resource for Claude. claude-grc-engineering turns technical evidence from cloud, SaaS, code, and security tools into framework-aligned findings, gap reports, remediation guidance, evidence packages, and OSCAL workflows.

430101 skills1 MCP
Get the whole plugin

Stars on GitHub

Momentum

stars in total
430
Star history of GRCEngClub/claude-grc-engineering on GitHub, a chart by star-history.com

Other commands on trust-center.

research

research

Command

Start or resume an academic research project — idea through literature, methodology, writing, feedback, and publishing

collect

collect

Command

Query AWS for compliance-relevant configuration across IAM, S3, CloudTrail, EBS, and emit findings conforming to the v1 contract.

setup

setup

Command

Install the frdocx-to-froscal-ssp Python pipeline and verify its dependencies. Idempotent.

retrieve

retrieve

Command

Retrieve a single AWS Secrets Manager secret value to stdout or a 0600-permission file. Opt-in retrieval mode — never writes to…

scan

scan

Command

Run testssl.sh against one or more HTTPS endpoints and emit v1 Findings mapped to SOC 2, NIST 800-53, PCI DSS 4.0.1, ISO 27001,…

More commands from other plugins.

deslop-reborn

deslop-reborn

Command

One iteration of the IronClaw Reborn de-slop loop — take ONE Reborn crate, fan out parallel review sub-agents (thermo-nuclear…

ironclaw13d13k
@nearai@nearaiInstall Command
audit

audit

Command

Audit a file, directory, or whole repo for insecure default configuration: fallback secrets, default credentials, fail-open…

@trailofbits@trailofbitsInstall Command
arsenal

arsenal

Command

Show which external bug-bounty tools are installed on this machine and print install hints for the missing ones. Curated from…

@awarexone@awarexoneInstall Command