grc-diagrams
claudeEditable draw.io diagram patterns for GRC system boundaries, evidence flows, control maps, risk treatment, audits, crosswalks, TPRM, POA&M, data flows, RACI, and operating models.
13 skills · 13 commands
GRC connector for AWS Secrets Manager: rotation, customer-managed KMS, resource policy, and access-pattern checks → v1 finding contract. Hybrid shape supports opt-in secret retrieval to stdout or 0600-permission files.
Plugin aws-secrets-inspector from marketplace grc-engineering-suite in GRCEngClub/claude-grc-engineering. Commands read from the repo's manifest — today.
aws-secrets-inspector-expertUse when interpreting AWS Secrets Manager connector output, deciding between inspector and retrieve modes, drafting SCF-mapped controls for rotation / KMS / public-access / inactive-access findings, or troubleshooting an aws-secrets-inspector run.
/aws-secrets-inspector:collectQuery AWS Secrets Manager for compliance-relevant configuration (rotation, KMS, resource policy, access patterns) and emit findings conforming to the v1 contract.
/aws-secrets-inspector:retrieveRetrieve a single AWS Secrets Manager secret value to stdout or a 0600-permission file. Opt-in retrieval mode — never writes to the findings cache.
/aws-secrets-inspector:setupVerify the aws-secrets-inspector connector's prerequisites and write its config. Idempotent.
/aws-secrets-inspector:statusReport configuration state, credential validity, and last-run freshness for aws-secrets-inspector.
Editable draw.io diagram patterns for GRC system boundaries, evidence flows, control maps, risk treatment, audits, crosswalks, TPRM, POA&M, data flows, RACI, and operating models.
13 skills · 13 commands
Maps IaC to compliance controls, generates policies, collects evidence, reviews PRs
7 skills · 19 commands
Build and deploy a professional portfolio website for GRC engineers — certifications, frameworks, audit experience, and AWS hosting.
7 skills · 7 commands
Translate findings, risks, and metrics into narratives leadership reads. Reference implementation of the Reporting category from RFC #38.
5 skills · 4 commands
ISO 27001 Annex A controls and ISMS implementation guidance
1 skill · 8 commands
NIST 800-53 control families and baseline selection (Low/Moderate/High)
1 skill · 8 commands
ADR lifecycle management — create, index, supersede, and link Architecture Decision Records to code
5 skills · 1 command · 1 agent
Install the "AAS Privacy & Compliance Engineering" workflow plugin from Agentic Awesome Skills.
6 skills
Build, deploy, and operate applications on AWS. Skills to author infrastructure-as-code, use core services, and complete common tasks.
27 skills · 1 MCP server
SAST analysis, dependency vulnerability scanning, OWASP Top 10 compliance, container security scanning, and automated security hardening
5 skills · 3 commands · 2 agents
Twilio Skills provide procedural knowledge for AI coding agents — which APIs to use, in what order, and what to avoid. Covers SMS, Voice, WhatsApp, Verify, SendGrid, Compliance, and 30+ products.
57 skills · 1 MCP server
14 regulatory affairs & quality management skills for HealthTech/MedTech: ISO 13485 QMS, MDR 2017/745, FDA 510(k)/PMA, GDPR/DSGVO, ISO 27001 ISMS, CAPA management, risk management, clinical evaluation, SOC 2 compliance.
21 skills
This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.