Skip to content
Security
Skill

/questionnaire-analyzer

Analyzes vendor security questionnaire responses. Identifies red flags, gaps, and areas requiring follow-up. Supports SIG, CAIQ, and custom questionnaires.

BOOST
@grcengclubgrcengclub@grcengclub
From plugin
trust-center
430101 skills140 commands1 MCP

Claude Code

$ npx -y skills add GRCEngClub/claude-grc-engineering --skill questionnaire-analyzer --agent claude-code

SKILL.md

questionnaire-analyzer.SKILL.md
name: questionnaire-analyzer
description: Analyzes vendor security questionnaire responses. Identifies red flags, gaps, and areas requiring follow-up. Supports SIG, CAIQ, and custom questionnaires.
allowed-tools: Read, Glob, Grep

Questionnaire Analyzer

Analyzes vendor security questionnaire responses.

Capabilities

  • **Completeness Check**: Identify missing or incomplete responses
  • **Red Flag Detection**: Flag concerning answers
  • **Gap Analysis**: Compare responses to requirements
  • **Follow-up Generation**: Create targeted follow-up questions

Supported Questionnaires

SIG (Standardized Information Gathering)

  • SIG Core
  • SIG Lite
  • Custom SIG variations

CAIQ (Consensus Assessments Initiative Questionnaire)

  • CSA CAIQ v4
  • Cloud-specific controls

Industry-Specific

  • HECVAT (Higher Education)
  • HITRUST CSF
  • Custom organizational questionnaires

Analysis Output

  • Response summary by domain
  • Risk findings with severity
  • Evidence gaps
  • Follow-up questions
  • Comparison to baseline expectations

Red Flag Indicators

  • "N/A" responses for critical controls
  • Vague or evasive answers
  • Missing certifications for data type
  • No incident response plan
  • Unlimited subcontractor use
Read it on GitHub ↗
Stats
ReactBashKubernetesTerraformAWSGCPAzureGitHubAnthropicSlackJiraVite
432
Stars
105
Forks
Active
Maintenance
JavaScript
Language
Last commit
Created

Repo: GRCEngClub/claude-grc-engineering

In this plugin
140 commands101 skills1 MCP
See everything inside
@grcengclub
Ships withtrust-center

Open-source GRC Engineering resource for Claude. claude-grc-engineering turns technical evidence from cloud, SaaS, code, and security tools into framework-aligned findings, gap reports, remediation guidance, evidence packages, and OSCAL workflows.

430101 skills1 MCP
Get the whole plugin

Stars on GitHub

Momentum

stars in total
430
Star history of GRCEngClub/claude-grc-engineering on GitHub, a chart by star-history.com
See what's trending this week

Other skills on trust-center.

See all 101 skills in trust-center

More skills from other plugins.

api-security

api-security

Use for authorized security assessment of REST, GraphQL, WebSocket, or SOAP APIs, including discovery, authentication,…

reverse-skill7w44k
@zhaoxuya520@zhaoxuya520Install Skill
nemoclaw-user-guide

nemoclaw-user-guide

Find official NemoClaw documentation for installation, configuration, operation, or troubleshooting. Also handles requested docs…

nemoclaw12d23k
@nvidia@nvidiaInstall Skill

Questions about questionnaire-analyzer.

Which coding agents can use questionnaire-analyzer?
questionnaire-analyzer installs in Claude Code, Codex, Cursor, Gemini CLI, GitHub Copilot, OpenCode and Windsurf with the skills CLI, using each agent's flag shown on this page. Flowy's auto-invocation, which fires a skill when your prompt matches, runs in Claude Code only.