/sync-docs
Sync latest FedRAMP 20X policies from official repository
$ npx -y skills add GRCEngClub/claude-grc-engineering --agent claude-codeHow it fires
How this command gets triggered: by you, by Claude, or both.
- Fires itselfClaude auto-loads it when your prompt matches the work.
- You can call itInvoke it directly when you want it.
- Slash command
/sync-docs
Context preview
What this command does when you run it.
Sync latest FedRAMP 20X policies from official repository
Command definition
sync-docs.mddescription: Sync latest FedRAMP 20X policies from official repository
Sync FedRAMP Docs
Synchronizes the latest FedRAMP 20X machine-readable policies from the official FedRAMP/docs GitHub repository.
Arguments
- `$1` - Sync mode (optional: check, full, force)
Sync Modes
- **check** - Check for updates without downloading
- **full** - Download all policy files
- **force** - Force re-download even if up-to-date
Policy Files Synced
From https://github.com/FedRAMP/docs:
| File | Description | |------|-------------| | FRMR.KSI | Key Security Indicators | | FRMR.VDR | Vulnerability Detection and Response | | FRMR.MAS | Minimum Assessment Scope | | FRMR.PVA | Persistent Validation and Assessment | | FRMR.ICP | Incident Communications Procedures | | FRMR.SCN | Significant Change Notifications | | FRMR.CCM | Collaborative Continuous Monitoring | | FRMR.ADS | Authorization Data Sharing | | FRMR.RSC | Recommended Secure Configuration | | FRMR.UCM | Using Cryptographic Modules | | FRMR.FSI | FedRAMP Security Inbox | | FRMR.FRD | FedRAMP Definitions |
Output
- List of updated policies
- Changelog of what changed
- New requirements identified
- Deprecations noted
Example
/fedramp-20x:sync-docs check /fedramp-20x:sync-docs full
Open-source GRC Engineering resource for Claude. claude-grc-engineering turns technical evidence from cloud, SaaS, code, and security tools into framework-aligned findings, gap reports, remediation guidance, evidence packages, and OSCAL workflows.
Repo: GRCEngClub/claude-grc-engineering
Other commands on trust-center.
- /research
Start or resume an academic research project — idea through literature, methodology, writing, feedback, and publishing
Open command - /collect
Query AWS for compliance-relevant configuration across IAM, S3, CloudTrail, EBS, and emit findings conforming to the v1 contract.
Open command - /setup
Install the frdocx-to-froscal-ssp Python pipeline and verify its dependencies. Idempotent.
Open command - /status
Check the deployment status of the trust center.
Open command - /scan
Run testssl.sh against one or more HTTPS endpoints and emit v1 Findings mapped to SOC 2, NIST 800-53, PCI DSS 4.0.1, ISO 27001, and SCF controls.
Open command - /compliance-posture
Serve a localhost compliance posture dashboard from monitor-continuous JSON
Open command