Skip to content
Security
Command

/role

Onboarding primer for a GRC role — what you'll do, what you'll touch in this toolkit, and where to start

From plugin
trust-center
430140 skills140 commands1 MCP
> /plugin marketplace add GRCEngClub/claude-grc-engineering

Command definition

role.md
description: Onboarding primer for a GRC role — what you'll do, what you'll touch in this toolkit, and where to start

/teach-me:role

For someone who just got hired into (or pivoted to) a GRC role. Outputs a practical "your first 90 days" primer for the role, mapped to commands in this toolkit.

Usage

/teach-me:role <persona> [--background=<level>]

Arguments

  • `<persona>` (required) — `grc-engineer`, `grc-auditor`, `grc-internal`, `grc-tprm`. Aliases (`engineer`, `auditor`, `internal`, `tprm`, `vendor-risk`) resolve to the canonical name.
  • `--background=<level>` (optional) — `none` (career transitioner), `adjacent` (security or platform-engineering background), `practitioner` (already in GRC, switching specialties). Default `none`.

What this produces

1. **What this role does** — paraphrased role definition; what they own, what they don't, who they report into. 2. **Day in the life** — concrete activities the role performs weekly and quarterly. 3. **What you'll touch in this toolkit** — the persona's plugin (`grc-engineer`, `grc-auditor`, `grc-internal`, `grc-tprm`) plus the framework and connector plugins they'll lean on. Names actual commands. 4. **Common mistakes new-to-role practitioners make** — 2–3, with the toolkit feature that prevents each. 5. **First-week, first-month, first-quarter recommendations** — concrete commands to run, things to read, people to meet. 6. **Adjacent roles you'll work with** — and how their toolkit footprint intersects with yours.

Delegation

The `framework-tutor` skill is invoked. It reads:

  • The persona plugin's commands directory for the actual command surface.
  • `MAINTAINERS.md` to point new practitioners at people active in that role.

Examples

/teach-me:role grc-engineer
/teach-me:role auditor --background=adjacent
/teach-me:role grc-tprm --background=practitioner
Read more
@grcengclub
Ships withtrust-center

Open-source GRC Engineering resource for Claude. claude-grc-engineering turns technical evidence from cloud, SaaS, code, and security tools into framework-aligned findings, gap reports, remediation guidance, evidence packages, and OSCAL workflows.

430101 skills1 MCP
Get the whole plugin

Stars on GitHub

Momentum

stars in total
430
Star history of GRCEngClub/claude-grc-engineering on GitHub, a chart by star-history.com

Other commands on trust-center.

research

research

Command

Start or resume an academic research project — idea through literature, methodology, writing, feedback, and publishing

collect

collect

Command

Query AWS for compliance-relevant configuration across IAM, S3, CloudTrail, EBS, and emit findings conforming to the v1 contract.

setup

setup

Command

Install the frdocx-to-froscal-ssp Python pipeline and verify its dependencies. Idempotent.

retrieve

retrieve

Command

Retrieve a single AWS Secrets Manager secret value to stdout or a 0600-permission file. Opt-in retrieval mode — never writes to…

scan

scan

Command

Run testssl.sh against one or more HTTPS endpoints and emit v1 Findings mapped to SOC 2, NIST 800-53, PCI DSS 4.0.1, ISO 27001,…

More commands from other plugins.

deslop-reborn

deslop-reborn

Command

One iteration of the IronClaw Reborn de-slop loop — take ONE Reborn crate, fan out parallel review sub-agents (thermo-nuclear…

ironclaw13d13k
@nearai@nearaiInstall Command
audit

audit

Command

Audit a file, directory, or whole repo for insecure default configuration: fallback secrets, default credentials, fail-open…

@trailofbits@trailofbitsInstall Command
arsenal

arsenal

Command

Show which external bug-bounty tools are installed on this machine and print install hints for the missing ones. Curated from…

@awarexone@awarexoneInstall Command