academic-research-comp…
Guide a research project through the full academic lifecycle — from raw idea to concrete research question, literature grounding,…
@grcengclubInstall SkillSecurity
Skill
/control-tester
Designs and documents control testing procedures. Creates test plans, executes walkthroughs, and documents results for audit workpapers.
Claude Code
$ npx -y skills add GRCEngClub/claude-grc-engineering --skill control-tester --agent claude-code
Codex
$ npx skills add GRCEngClub/claude-grc-engineering --skill control-tester -a codex -y
Cursor
$ npx skills add GRCEngClub/claude-grc-engineering --skill control-tester -a cursor -y
Gemini CLI
$ npx skills add GRCEngClub/claude-grc-engineering --skill control-tester -a gemini-cli -y
GitHub Copilot
$ npx skills add GRCEngClub/claude-grc-engineering --skill control-tester -a github-copilot -y
OpenCode
$ npx skills add GRCEngClub/claude-grc-engineering --skill control-tester -a opencode -y
Windsurf
$ npx skills add GRCEngClub/claude-grc-engineering --skill control-tester -a windsurf -y
SKILL.md
control-tester.SKILL.mdname: control-tester description: Designs and documents control testing procedures. Creates test plans, executes walkthroughs, and documents results for audit workpapers. allowed-tools: Read, Glob, Grep, Bash
Control Tester
Designs and executes control testing procedures for compliance audits.
Capabilities
- **Test Design**: Creates testing procedures based on control objectives
- **Walkthrough Documentation**: Guides and documents control walkthroughs
- **Sample Selection**: Recommends appropriate sample sizes and selection methods
- **Results Documentation**: Formats testing results per professional standards
Testing Approaches
- **Inquiry**: Interview-based testing documentation
- **Observation**: Real-time control observation procedures
- **Inspection**: Document and artifact examination
- **Re-performance**: Independent execution of control activities
Supported Frameworks
- SOC 2 Trust Service Criteria
- ISO 27001 Annex A Controls
- NIST 800-53 Control Families
- PCI DSS Requirements
- HIPAA Security Rule
Output Format
Generates test workpapers with:
- Control objective
- Test procedure steps
- Population and sample details
- Testing results
- Exceptions noted
- Conclusions
Ships withtrust-center
Open-source GRC Engineering resource for Claude. claude-grc-engineering turns technical evidence from cloud, SaaS, code, and security tools into framework-aligned findings, gap reports, remediation guidance, evidence packages, and OSCAL workflows.
430101 skills1 MCP
Stars on GitHub
Momentum
- stars in total
- 430
Other skills on trust-center.
@grcengclubInstall Skillaws-inspector-expert
Expertise in evaluating AWS accounts for compliance — what checks are meaningful, which SCF controls they map to, and how to…
@grcengclubInstall Skillaws-secrets-inspector-…
Use when interpreting AWS Secrets Manager connector output, deciding between inspector and retrieve modes, drafting SCF-mapped…
@grcengclubInstall Skillazure-inspector-expert
Expertise in evaluating Azure subscription findings from azure-inspector and mapping them to SCF controls.
@grcengclubInstall Skillcrowdstrike-inspector-…
Interpret CrowdStrike Falcon findings for sensor coverage, policy visibility, and host group scoping.
@grcengclubInstall Skilldatadog-inspector-expe…
Interpret datadog-inspector findings and translate Datadog monitoring, audit, log-retention, SSO, and RBAC results into GRC…
@grcengclubInstall SkillMore skills from other plugins.
api-security
Use for authorized security assessment of REST, GraphQL, WebSocket, or SOAP APIs, including discovery, authentication,…
@zhaoxuya520Install Skillabusing-dpapi-for-cred…
Extract and decrypt Windows DPAPI-protected secrets (Credential Manager, browser logins/cookies, Wi-Fi credentials, KeePass keys)…
@mukul975Install Skillclean-user-facing-text
Clean and finalize authorized natural-language text intended for readers by auditing suspicious invisible Unicode and rewriting…
@guillaumemeyerInstall Skill
Questions about control-tester.
- Which coding agents can use control-tester?
- control-tester installs in Claude Code, Codex, Cursor, Gemini CLI, GitHub Copilot, OpenCode and Windsurf with the skills CLI, using each agent's flag shown on this page. Flowy's auto-invocation, which fires a skill when your prompt matches, runs in Claude Code only.