research
CommandStart or resume an academic research project — idea through literature, methodology, writing, feedback, and publishing
@grcengclubInstall CommandSecurity
Command
/infra
Deploy AWS CloudFormation stacks for S3, CloudFront, Route 53, ACM, and optionally the contact form Lambda + API Gateway.
> /plugin marketplace add GRCEngClub/claude-grc-engineering
Command definition
infra.mddescription: Deploy AWS CloudFormation stacks for S3, CloudFront, Route 53, ACM, and optionally the contact form Lambda + API Gateway.
Deploy Infrastructure
Provisions all AWS infrastructure needed to host your GRC portfolio using CloudFormation:
- **S3 bucket** — stores your built website files
- **CloudFront distribution** — global CDN with HTTPS
- **Route 53** + **ACM certificate** — custom domain with SSL *(if configured)*
- **Lambda + API Gateway** — contact form backend *(if configured)*
Deployment takes ~5–15 minutes. Stack outputs (bucket name, distribution ID, CloudFront URL) are automatically saved back to `site-config.json`.
Arguments
- `$1` — Project directory containing `site-config.json` (optional; defaults to current directory)
Prerequisite
Run `/grc-portfolio:preflight` first. All checks must pass.
Example
/grc-portfolio:infra ~/Desktop/repos/my-grc-portfolio /grc-portfolio:infra
Next Step
Run `/grc-portfolio:deploy` to build and push your site to the new infrastructure.
Ships withtrust-center
Open-source GRC Engineering resource for Claude. claude-grc-engineering turns technical evidence from cloud, SaaS, code, and security tools into framework-aligned findings, gap reports, remediation guidance, evidence packages, and OSCAL workflows.
430101 skills1 MCP
Stars on GitHub
Momentum
- stars in total
- 430
Other commands on trust-center.
@grcengclubInstall Commandcollect
CommandQuery AWS for compliance-relevant configuration across IAM, S3, CloudTrail, EBS, and emit findings conforming to the v1 contract.
@grcengclubInstall Commandsetup
CommandInstall the frdocx-to-froscal-ssp Python pipeline and verify its dependencies. Idempotent.
@grcengclubInstall Commandretrieve
CommandRetrieve a single AWS Secrets Manager secret value to stdout or a 0600-permission file. Opt-in retrieval mode — never writes to…
@grcengclubInstall Commandscan
CommandRun testssl.sh against one or more HTTPS endpoints and emit v1 Findings mapped to SOC 2, NIST 800-53, PCI DSS 4.0.1, ISO 27001,…
@grcengclubInstall CommandMore commands from other plugins.
audit
CommandAudit a file, directory, or whole repo for insecure default configuration: fallback secrets, default credentials, fail-open…
@trailofbitsInstall Commandagt-check
CommandCheck text against AGT prompt-injection, context-poisoning, and MCP threat detectors.
@microsoftInstall Commandarsenal
CommandShow which external bug-bounty tools are installed on this machine and print install hints for the missing ones. Curated from…
@awarexoneInstall Command