research
CommandStart or resume an academic research project — idea through literature, methodology, writing, feedback, and publishing
Generate audit workpaper documentation
> /plugin marketplace add GRCEngClub/claude-grc-engineering
description: Generate audit workpaper documentation
Creates structured audit workpaper documentation for findings and testing.
1. Gather relevant information about the control/area 2. Structure the workpaper per professional standards 3. Include all required elements:
# Generate finding workpaper /grc-auditor:generate-workpaper finding "Access Control Deficiency" # Generate PCI-DSS control test workpaper /grc-auditor:generate-workpaper test "PCI-DSS Requirement 8.4.2 - MFA Implementation" # Generate SOC 2 summary workpaper /grc-auditor:generate-workpaper summary "CC6 - Logical and Physical Access Controls"
Open-source GRC Engineering resource for Claude. claude-grc-engineering turns technical evidence from cloud, SaaS, code, and security tools into framework-aligned findings, gap reports, remediation guidance, evidence packages, and OSCAL workflows.
Start or resume an academic research project — idea through literature, methodology, writing, feedback, and publishing
Query AWS for compliance-relevant configuration across IAM, S3, CloudTrail, EBS, and emit findings conforming to the v1 contract.
Install the frdocx-to-froscal-ssp Python pipeline and verify its dependencies. Idempotent.
Retrieve a single AWS Secrets Manager secret value to stdout or a 0600-permission file. Opt-in retrieval mode — never writes to…
Run testssl.sh against one or more HTTPS endpoints and emit v1 Findings mapped to SOC 2, NIST 800-53, PCI DSS 4.0.1, ISO 27001,…
Audit a file, directory, or whole repo for insecure default configuration: fallback secrets, default credentials, fail-open…
Check text against AGT prompt-injection, context-poisoning, and MCP threat detectors.
Show which external bug-bounty tools are installed on this machine and print install hints for the missing ones. Curated from…