claude

grc-auditor

Evidence review, control validation, and audit workpaper generation for external auditors

433 on GitHubby GRC Engineering Club Contributorsv0.1.0MITupdated today
/

Plugin grc-auditor from marketplace grc-engineering-suite in GRCEngClub/claude-grc-engineering. Commands read from the repo's manifest — today.

What it installs

Skills (3)

  • control-tester

    Designs and documents control testing procedures. Creates test plans, executes walkthroughs, and documents results for audit workpapers.

  • evidence-validator

    Validates audit evidence artifacts for completeness, timeliness, relevance, and authenticity. Reviews screenshots, logs, configurations, and policies against control requirements.

  • finding-generator

    Generates professional audit findings using the Condition-Criteria-Cause-Effect format. Creates management letter comments and remediation recommendations.

Slash commands (4)

  • /grc-auditor:generate-workpaper

    Generate audit workpaper documentation

  • /grc-auditor:review-evidence

    Review and validate evidence artifacts against control requirements

  • /grc-auditor:risk-report

    Draft a ranked, evidence-cited risk report from a folder of raw evidence

  • /grc-auditor:validate-control

    Validate control implementation against framework requirements

View source on GitHub grcengclub.com

More from GRCEngClub/claude-grc-engineering

All 70 plugins →

grc-diagrams

claude

Editable draw.io diagram patterns for GRC system boundaries, evidence flows, control maps, risk treatment, audits, crosswalks, TPRM, POA&M, data flows, RACI, and operating models.

13 skills · 13 commands

433

grc-engineer

claude

Maps IaC to compliance controls, generates policies, collects evidence, reviews PRs

7 skills · 19 commands

433

grc-portfolio

claude

Build and deploy a professional portfolio website for GRC engineers — certifications, frameworks, audit experience, and AWS hosting.

7 skills · 7 commands

433

grc-reporter

claude

Translate findings, risks, and metrics into narratives leadership reads. Reference implementation of the Reporting category from RFC #38.

5 skills · 4 commands

433

iso27001

claude

ISO 27001 Annex A controls and ISMS implementation guidance

1 skill · 8 commands

433

nist-800-53

claude

NIST 800-53 control families and baseline selection (Low/Moderate/High)

1 skill · 8 commands

433

Maintain grc-auditor?

This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.

claude & codex plugins70 plugins