academic-research-comp…
Guide a research project through the full academic lifecycle — from raw idea to concrete research question, literature grounding,…
Inventory GCP Secret Manager global secret names without reading payloads.
Claude Code
$ npx -y skills add GRCEngClub/claude-grc-engineering --skill gcp-secret-metadata-expert --agent claude-code
Codex
$ npx skills add GRCEngClub/claude-grc-engineering --skill gcp-secret-metadata-expert -a codex -y
Cursor
$ npx skills add GRCEngClub/claude-grc-engineering --skill gcp-secret-metadata-expert -a cursor -y
Gemini CLI
$ npx skills add GRCEngClub/claude-grc-engineering --skill gcp-secret-metadata-expert -a gemini-cli -y
GitHub Copilot
$ npx skills add GRCEngClub/claude-grc-engineering --skill gcp-secret-metadata-expert -a github-copilot -y
OpenCode
$ npx skills add GRCEngClub/claude-grc-engineering --skill gcp-secret-metadata-expert -a opencode -y
Windsurf
$ npx skills add GRCEngClub/claude-grc-engineering --skill gcp-secret-metadata-expert -a windsurf -y
name: gcp-secret-metadata-expert description: Inventory GCP Secret Manager global secret names without reading payloads.
Ask for explicit authorization and a project ID before inventory. Follow the `/gcp-secret-metadata:list` command. Treat names as sensitive. Never request, access or print secret values in an agent session. With explicit authorization, `/gcp-secret-metadata:history` reads one secret's version states and schedule; neither command establishes IAM policy, rotation effectiveness, or compliance. For runtime injection, provide the operator-only instructions in `/gcp-secret-metadata:run`; never execute that helper in an agent session.
Open-source GRC Engineering resource for Claude. claude-grc-engineering turns technical evidence from cloud, SaaS, code, and security tools into framework-aligned findings, gap reports, remediation guidance, evidence packages, and OSCAL workflows.
Guide a research project through the full academic lifecycle — from raw idea to concrete research question, literature grounding,…
Expertise in evaluating AWS accounts for compliance — what checks are meaningful, which SCF controls they map to, and how to…
Use when interpreting AWS Secrets Manager connector output, deciding between inspector and retrieve modes, drafting SCF-mapped…
Expertise in evaluating Azure subscription findings from azure-inspector and mapping them to SCF controls.
Interpret CrowdStrike Falcon findings for sensor coverage, policy visibility, and host group scoping.
Interpret datadog-inspector findings and translate Datadog monitoring, audit, log-retention, SSO, and RBAC results into GRC…
Use for authorized security assessment of REST, GraphQL, WebSocket, or SOAP APIs, including discovery, authentication,…
Extract and decrypt Windows DPAPI-protected secrets (Credential Manager, browser logins/cookies, Wi-Fi credentials, KeePass keys)…
Clean and finalize authorized natural-language text intended for readers by auditing suspicious invisible Unicode and rewriting…