Skill
academic-research-comp…
Guide a research project through the full academic lifecycle — from raw idea to concrete research question, literature grounding, methodology, writing,…
@grcengclubView SkillSecurity
Skill
/wiz-inspector-expert
Use `wiz-inspector` when Wiz CNAPP is the source of cloud posture, vulnerability, toxic-combination, or inventory evidence.
Install
$ npx -y skills add GRCEngClub/claude-grc-engineering --skill wiz-inspector-expert --agent claude-codeHow it fires
How this skill gets triggered: by you, by Claude, or both.
- Fires itselfAuto-invocation. Claude auto-loads it when your prompt matches the work.Auto-invocation is when the right skill fires by itself at the right moment, driven by a FLOW.md router and a hook, instead of you invoking it by name. It is the difference between a skill being installed and a skill actually getting used.Read the full definition →
- You can call itInvoke it directly when you want it.
- Slash command
/wiz-inspector-expert
Context preview
The summary Claude sees to decide when to auto-load this skill.
Use `wiz-inspector` when Wiz CNAPP is the source of cloud posture, vulnerability, toxic-combination, or inventory evidence.
SKILL.md
wiz-inspector-expert.SKILL.mdWiz Inspector Expert
Use `wiz-inspector` when Wiz CNAPP is the source of cloud posture, vulnerability, toxic-combination, or inventory evidence.
Inputs:
- `WIZ_CLIENT_ID`
- `WIZ_CLIENT_SECRET`
- `WIZ_API_URL`, for example `https://api.<region>.app.wiz.io/graphql`
- optional `WIZ_AUTH_URL`, defaulting to `https://auth.app.wiz.io/oauth/token`
- optional `WIZ_PROJECT_ID` to constrain collection to a Wiz project
- required read-only scopes: `read:projects`, `read:issues`, `read:vulnerabilities`, `read:inventory`
Run `/wiz-inspector:setup`, then `/wiz-inspector:collect`. Findings are emitted using `schemas/finding.schema.json` and can feed GRC Engineering gap assessments, OSCAL exports, workpaper generation, and remediation workflows.
The collector handles cursor pagination, project scoping, Wiz severity/status normalization, and partial results. If a GraphQL resource query fails, it emits an `inconclusive` Finding for that endpoint and continues collecting the remaining resource types.
Ships withtrust-center
Open-source GRC Engineering resource for Claude. claude-grc-engineering turns technical evidence from cloud, SaaS, code, and security tools into framework-aligned findings, gap reports, remediation guidance, evidence packages, and OSCAL workflows.
Get the whole plugin
Stats
398
Stars
90
Forks
Active
Maintenance
JavaScript
Language
8d ago
Last commit
8mo ago
Created
Repo: GRCEngClub/claude-grc-engineering
Other skills on trust-center.
@grcengclubView SkillSkill
aws-inspector-expert
Expertise in evaluating AWS accounts for compliance — what checks are meaningful, which SCF controls they map to, and how to interpret aws CLI output.
@grcengclubView SkillSkill
aws-secrets-inspector-…
Use when interpreting AWS Secrets Manager connector output, deciding between inspector and retrieve modes, drafting SCF-mapped controls for rotation / KMS /…
@grcengclubView SkillSkill
azure-inspector-expert
Expertise in evaluating Azure subscription findings from azure-inspector and mapping them to SCF controls.
@grcengclubView SkillSkill
crowdstrike-inspector-…
Interpret CrowdStrike Falcon findings for sensor coverage, policy visibility, and host group scoping.
@grcengclubView SkillSkill
datadog-inspector-expe…
Interpret datadog-inspector findings and translate Datadog monitoring, audit, log-retention, SSO, and RBAC results into GRC evidence and remediation.
@grcengclubView Skill