academic-research-comp…
Guide a research project through the full academic lifecycle — from raw idea to concrete research question, literature grounding,…
@grcengclubInstall SkillSecurity
Skill
/wiz-inspector-expert
Use `wiz-inspector` when Wiz CNAPP is the source of cloud posture, vulnerability, toxic-combination, or inventory evidence.
Claude Code
$ npx -y skills add GRCEngClub/claude-grc-engineering --skill wiz-inspector-expert --agent claude-code
Codex
$ npx skills add GRCEngClub/claude-grc-engineering --skill wiz-inspector-expert -a codex -y
Cursor
$ npx skills add GRCEngClub/claude-grc-engineering --skill wiz-inspector-expert -a cursor -y
Gemini CLI
$ npx skills add GRCEngClub/claude-grc-engineering --skill wiz-inspector-expert -a gemini-cli -y
GitHub Copilot
$ npx skills add GRCEngClub/claude-grc-engineering --skill wiz-inspector-expert -a github-copilot -y
OpenCode
$ npx skills add GRCEngClub/claude-grc-engineering --skill wiz-inspector-expert -a opencode -y
Windsurf
$ npx skills add GRCEngClub/claude-grc-engineering --skill wiz-inspector-expert -a windsurf -y
SKILL.md
wiz-inspector-expert.SKILL.mdWiz Inspector Expert
Use `wiz-inspector` when Wiz CNAPP is the source of cloud posture, vulnerability, toxic-combination, or inventory evidence.
Inputs:
- `WIZ_CLIENT_ID`
- `WIZ_CLIENT_SECRET`
- `WIZ_API_URL`, for example `https://api.<region>.app.wiz.io/graphql`
- optional `WIZ_AUTH_URL`, defaulting to `https://auth.app.wiz.io/oauth/token`
- optional `WIZ_PROJECT_ID` to constrain collection to a Wiz project
- required read-only scopes: `read:projects`, `read:issues`, `read:vulnerabilities`, `read:inventory`
Run `/wiz-inspector:setup`, then `/wiz-inspector:collect`. Findings are emitted using `schemas/finding.schema.json` and can feed GRC Engineering gap assessments, OSCAL exports, workpaper generation, and remediation workflows.
The collector handles cursor pagination, project scoping, Wiz severity/status normalization, and partial results. If a GraphQL resource query fails, it emits an `inconclusive` Finding for that endpoint and continues collecting the remaining resource types.
Ships withtrust-center
Open-source GRC Engineering resource for Claude. claude-grc-engineering turns technical evidence from cloud, SaaS, code, and security tools into framework-aligned findings, gap reports, remediation guidance, evidence packages, and OSCAL workflows.
430101 skills1 MCP
Stars on GitHub
Momentum
- stars in total
- 430
Other skills on trust-center.
@grcengclubInstall Skillaws-inspector-expert
Expertise in evaluating AWS accounts for compliance — what checks are meaningful, which SCF controls they map to, and how to…
@grcengclubInstall Skillaws-secrets-inspector-…
Use when interpreting AWS Secrets Manager connector output, deciding between inspector and retrieve modes, drafting SCF-mapped…
@grcengclubInstall Skillazure-inspector-expert
Expertise in evaluating Azure subscription findings from azure-inspector and mapping them to SCF controls.
@grcengclubInstall Skillcrowdstrike-inspector-…
Interpret CrowdStrike Falcon findings for sensor coverage, policy visibility, and host group scoping.
@grcengclubInstall Skilldatadog-inspector-expe…
Interpret datadog-inspector findings and translate Datadog monitoring, audit, log-retention, SSO, and RBAC results into GRC…
@grcengclubInstall SkillMore skills from other plugins.
api-security
Use for authorized security assessment of REST, GraphQL, WebSocket, or SOAP APIs, including discovery, authentication,…
@zhaoxuya520Install Skillabusing-dpapi-for-cred…
Extract and decrypt Windows DPAPI-protected secrets (Credential Manager, browser logins/cookies, Wi-Fi credentials, KeePass keys)…
@mukul975Install Skillclean-user-facing-text
Clean and finalize authorized natural-language text intended for readers by auditing suspicious invisible Unicode and rewriting…
@guillaumemeyerInstall Skill
Questions about wiz-inspector-expert.
- Which coding agents can use wiz-inspector-expert?
- wiz-inspector-expert installs in Claude Code, Codex, Cursor, Gemini CLI, GitHub Copilot, OpenCode and Windsurf with the skills CLI, using each agent's flag shown on this page. Flowy's auto-invocation, which fires a skill when your prompt matches, runs in Claude Code only.